0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5daa74e4, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x80, 0x6, 0x89, 0x2, 0x800, 0x1, 0x6, 0x0, 0x5, 0x0, 0x521}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) close_range(r2, r4, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f00000001c0)) writev(r3, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000001100), 0x4) fcntl$setsig(r6, 0xa, 0x30) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000001100), 0x4) dup3(r1, r7, 0x80000) [ 1165.547287] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1165.549003] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1165.550137] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1165.551306] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1165.552384] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1165.553565] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1165.554892] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1165.555959] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1165.557032] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:22:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r0 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r2 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r0, r1, r2], 0x3}, 0x58) 22:22:08 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() ptrace(0x10, r0) 22:22:08 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x0, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() (fail_nth: 60) 22:22:08 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x0, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:08 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) sendfile(r0, r1, &(0x7f0000000000)=0x400000000020e, 0xfffd) 22:22:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x5, 0x7fff, 0x80, 0x8000, 0x0, "b64bc9a01de40e13"}) writev(r0, 0x0, 0x0) [ 1176.436390] bt_err_ratelimited: 10 callbacks suppressed [ 1176.436416] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1176.437635] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1176.438991] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1176.440454] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1176.443069] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1176.444556] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1176.445918] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1176.450027] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1176.453648] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1176.456505] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1176.463287] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1176.472872] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1176.474164] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:08 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x0, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:08 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x0, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1176.515416] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1176.515504] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1176.519867] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1176.523068] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1176.530626] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1176.532098] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1176.533484] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1176.573644] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1176.574142] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1176.576276] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1176.579002] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1176.580999] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1176.582616] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1176.584397] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1176.585771] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1176.585867] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1176.590523] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1176.595091] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1176.596406] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1176.597643] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:22:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() (fail_nth: 61) 22:22:08 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:08 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x15, r0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000019100)="7c165c3c768b423637a6504c2809d543f663bc5c293c20bb871e6bba53d8434f5b1e6a6cc5e2a8f948fb2905e0c5198e61ba5db106fc827ba4b12348cff73635fe19ce46a82922245e651b7f79e08fa0bf4f154325ed2b5e50b04a4afb9cc200d33240ab274602e9fe9d9fb71b7e4b6a3dfb9c74bd6f8a0a7f2f320e7d4a4587458b1cd490c3c08361", 0x89, r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) sendfile(r2, r3, &(0x7f0000000000), 0x4) readahead(r1, 0x1, 0x100000001) pread64(r1, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:22:08 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1176.831726] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1176.833620] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1176.837522] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1176.840242] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1176.916677] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1176.918798] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1176.921334] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1176.922639] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1176.923949] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:22:20 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:20 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x0, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:20 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() ptrace(0x10, r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fork() ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x3, 0x80000}) 22:22:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f0000000440)=[{&(0x7f00000000c0)="f34e191462bc1f586cfbc3479de7f158e026825a75b86ed1e1aff94aecb41a2ddfc37b9bf108b99fa0908bd43482e3691faa4745c13352c63a69c1300ef4092d16583695e3a6e8c3859148c1ed040b59bfdc682ea938e68318032d0ea00d89ef4971eed9092b1df2a8", 0x69, 0x4}, {&(0x7f00000001c0)="c51a15b10e21740b318674b9709fa82e40e39af15fbf9036c8e3a1fd3abd6f65baacb5b6c1ba6e8a8870c41e231804c0bbc2b954c1826fa287072854aa536c731a16cf327835e5fc70fefd9515d8517dc737ae6fed4de20eb3d1d3833d2886762c9749103ea85540b4886ce7a4e4ce883d6bf03a6ee33a677276ba859ca65c8dc89a2d87ce6d0e71860cf5f2daaa4749f9761f6c7a13252613db81a1a17704e58c64e7bae144b180f412fbc3ab8750582a3b5310c1f936b71b608aac8ffae25003324587f67b8668c773f1", 0xcb, 0x7}, {&(0x7f00000002c0)="e057b58647ea40850ca7f60aeb9e50c207", 0x11, 0x100000000}, {&(0x7f0000000300)="b3e26732a11513cf97ef06037be0e5cfcb2844c0d662d35fb8d88e4bec8bafe228a89eb4a0b55017003feeeec4cd9c7199df34bf8b0a67c4b74a7e25d5436e4474cd29e84870fc75bc6ab45d83ec4ce998764e941681b3eb703a996c021523faf2b3fc564cc9afb12cfe064f18ec4b5eab50e8e87c550b777b8e1c2aea8ac9ad668b3fefb0db5ecfda9317f5d71ce4ff40397e351fb03897b42a069274ade72c8091109071bd47b819ec9a657ce41c26939478d16c6226dfbbbef6c466e7a69455aaa77ee678b26ed67351a055c3b7e5af37df3d", 0xd4, 0x9}, {&(0x7f0000000400)="0502a2beda62dbc4826de8405959cc3b", 0x10, 0x2}], 0x100000, &(0x7f00000004c0)={[{'*\x14{$&'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, '+!:{+:'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xfe:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x62, 0x36, 0x64, 0x64, 0x66, 0x0, 0x37], 0x2d, [0x66, 0x31, 0x32, 0x31], 0x2d, [0x35, 0x61, 0x3e, 0x64], 0x2d, [0x66, 0x36, 0x34, 0x4d56e20e7a49c622], 0x2d, [0x30, 0x31, 0x65, 0x61, 0x61, 0x35, 0x0, 0x61]}}}, {@uid_eq}, {@seclabel}, {@dont_measure}, {@dont_hash}, {@subj_type}]}) fadvise64(r0, 0x8, 0xc1, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) 22:22:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r0 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r2 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r0, r1, r2], 0x3}, 0x58) [ 1188.186121] bt_err_ratelimited: 4 callbacks suppressed [ 1188.186145] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1188.187691] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1188.188699] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1188.190778] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1188.192142] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1188.193256] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:22:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() (fail_nth: 62) 22:22:20 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) pwrite64(r1, &(0x7f0000000000)="a7cbe33246e931040b877478c76809017831e0f6b26002adf324c5613f1d36265efaa03fb0a18cae43dfe6c3361613b6b7", 0x31, 0xfffffffffffffff9) r2 = socket$inet6(0xa, 0x4, 0x9) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000019180)=0x8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'macvlan0\x00', {}, 0xedd0}) recvmsg(r2, &(0x7f000001a940)={&(0x7f0000019300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000198c0)=[{&(0x7f000001aa80)=""/75, 0x4b}, {&(0x7f0000019400)=""/99, 0x63}, {&(0x7f0000019480)=""/237, 0xed}, {&(0x7f0000019580)=""/215, 0xd7}, {&(0x7f0000019680)=""/172, 0xac}, {&(0x7f0000019740)=""/101, 0x65}, {&(0x7f00000197c0)=""/46, 0x2e}, {&(0x7f0000019800)=""/165, 0xa5}], 0x8, &(0x7f0000019940)=""/4096, 0x1000}, 0x80001120) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f000001a980)={0x8, [0x1, 0x80000000], 0x7}, 0x10) ioctl$FITHAW(r2, 0xc0045878) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f000001aa40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r5, &(0x7f000001ab40)=ANY=[@ANYBLOB="010a04070000000000000625b515c6d1a0529eff4e5e2f3a3b2813d34c29a4be3eb769568710e1457ce859e7d9d2f5591fc20220fb9359dd78983604cdc529afbc428b24eb27c2df757533880c7e6cb5b798d756754d3a21f023ca87e56d151a78b0c4faaaebff8480916af11bbf857d190074446aa0af000f792d9a1a78815a0ade6e090cd218a888339bc9b58d72d367fe8bf5d4e01bb8f08e55aeaad93270ee6325a9aefc21322b55ccf4e78a37a99234477abc32dfb72d"], 0xb) pread64(r0, &(0x7f0000019100)=""/101, 0x65, 0x5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000001100), 0x4) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f000001a9c0), &(0x7f000001aa00)=0x8) write$bt_hci(r1, &(0x7f00000191c0)={0x1, @set_cpb_data={{0xc76, 0xff}, {0x0, 0xf1, 0x4, "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"}}}, 0x103) 22:22:20 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1188.301568] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1188.302272] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1188.312322] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1188.314758] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1188.319972] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1188.321516] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1188.321635] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1188.324834] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1188.326370] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1188.333781] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1188.334393] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1188.340172] Bluetooth: hci7: ACL packet for unknown connection handle 201 22:22:20 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1188.392212] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1188.398103] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1188.398424] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1188.399511] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1188.400873] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1188.409805] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1188.415277] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1188.424486] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1188.427767] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r0 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r2 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r0, r1, r2], 0x3}, 0x58) 22:22:20 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1188.497485] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1188.498291] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1188.499721] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1188.501233] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1188.502084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1188.502875] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:22:20 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1188.540503] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1188.541688] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1188.543181] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1188.546274] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1188.547719] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:22:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001100), 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x4101}], 0x1, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)={[0xa2fe]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, 0x0, 0x0) [ 1188.808521] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1188.809798] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1188.813347] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1188.818290] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:22:35 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:35 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3}, 0x6617, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x35a, 0x0, 0xe5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x5d, 0x7, 0x2f, 0x3f, 0x0, 0x7, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x400, 0x672}, 0x8002, 0x1f, 0x80, 0x0, 0x80000000000000, 0x4, 0x401, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r0, 0x8) writev(r0, 0x0, 0x0) 22:22:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() 22:22:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x1d, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) vmsplice(r1, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) 22:22:35 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001100), 0x4) dup3(0xffffffffffffffff, r0, 0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fork() ptrace(0x10, r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x74d7134c49ce0f3c, 0xffffffffffffffff, 0x9ca}) [ 1202.901275] bt_err_ratelimited: 4 callbacks suppressed [ 1202.901300] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1202.902636] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1202.909192] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1202.910568] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1202.928326] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1202.930433] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1202.934208] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1202.937033] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1202.939346] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1202.940756] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1202.943799] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1202.945531] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1202.946609] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1202.951746] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1202.952343] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1202.954568] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1202.961256] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1202.962333] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1202.966672] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1202.970066] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1202.972499] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1202.973554] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1202.974747] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1202.978476] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:35 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:22:35 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:35 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1203.152805] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1203.156500] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1203.168147] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1203.169612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1203.213178] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1203.213217] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1203.213401] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1203.214392] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1203.214464] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1203.214590] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1203.214635] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1203.214680] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1203.225297] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1203.227293] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1203.228748] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1203.242803] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1203.244763] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1203.248658] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1203.250333] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1203.252423] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:35 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000) r1 = fork() ptrace(0x10, r1) 22:22:35 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:35 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1203.372703] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1203.378137] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1203.381592] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1203.444753] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1203.446458] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1203.450636] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1203.452263] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1203.455426] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1203.507775] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1203.515235] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1203.518554] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1203.533303] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1203.535455] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1203.537215] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1203.538730] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1203.540073] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1203.554416] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1203.556777] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1203.560222] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1203.562494] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:22:47 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2], 0x2, {r0}}, 0x58) 22:22:47 executing program 7: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) 22:22:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) 22:22:47 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:47 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:47 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x7ff, 0x40, 0x8, 0x4}, {0x5, 0x2, 0x3, 0x7}, {0x6, 0x7f, 0x9, 0xfff}, {0xffff, 0x40, 0x8}, {0x28, 0x80, 0xca, 0x8}, {0x0, 0x5, 0xff, 0x6}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4e, 0x0, 0x46) fork() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r3, 0x4, 0x2000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="03ffde511cefd24705fc5da56f0e015270068a1a6073ec523c93ea303232750bea3171e64ea9d47ea877de686fd3618ea2f65a891ce7aa97aa10ff130e2f7cd64d6a63f1d4cf5bb9c8c2f17cee22652deec6fc1ae582f7c7333f438ebe3cafa355a2ea80fab01c1e39eb084355a04a3aa521f4da82f887af71", 0x79}, {&(0x7f0000000240)="6f13a56aedb67da9be78015c8cc6812e29f05c9b75cc2fed490970182ed044b20d554b58ee7e895312045df8d3cb5bc8998e49ae1056b8878c29b00f720c5d2b2f9dedf218872ac4d7be73d49b45eedaa72a5abb3579ed97d238681564335b1b58929d9951d6f3da8663a8beed69ed5a16b22cddc7f0b64391ad4ef46776ac3d441937a509cc39919033102b8c466423cca4e1df684acb986972bb5dac6ee3dfaae982c78b5d877b436e9b5ccf15fc0f5947", 0xb2}, {&(0x7f0000000300)="fe6c2514e2ff17c90247a9bec7c3a0e8e9fde94cf7ace553984a2c959d45ae0107c1086eafc290489de1a60a677cd7d7b6a7927de9022781ae8a3e5388df51f034feb5e110910878873511a48398d7b3ab267ca4ba91735c2857bfa070f646247e59b3f97d3c2b63d8d242242dd6065b535c1c078467d72592f712ee506f65dc4e1abe1358acd1de266ff9345d0b2ed51adfb1de4b32d724ae0a08e73c62ca123527cd9c916e47a6f3c6cd6f888b03ca00c09a81dc12324c4318d65fe9a70e69cfe7847d05016c03daa08c1f", 0xcc}], 0x3, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r6, 0x4, 0x2000) r7 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x42801, 0xfd) fchmodat(r5, &(0x7f0000000400)='./file0\x00', 0x181) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r8, 0x1, r0, 0x1000}) 22:22:47 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:47 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1214.893623] bt_err_ratelimited: 12 callbacks suppressed [ 1214.893643] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1214.893650] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1214.894201] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1214.894290] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1214.894320] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1214.894716] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1214.895919] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1214.897356] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1214.897592] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1214.899246] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1214.905231] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1214.906735] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1214.908157] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1214.909692] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:47 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:47 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:22:47 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1214.954306] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1214.958288] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1214.970221] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1214.970309] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1214.972382] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1214.974674] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1214.976217] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1214.976383] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1214.982447] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1215.031194] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1215.031739] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1215.034400] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1215.037724] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1215.039257] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1215.041221] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1215.043185] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:47 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:47 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1215.078206] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1215.084518] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1215.089510] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1215.093352] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1215.096299] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1215.098270] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:22:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19000, 0xffffffff) 22:22:47 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1215.173408] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1215.177635] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1215.183486] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1215.185225] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1215.187638] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1215.189226] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1215.233531] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1215.234999] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1215.236468] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1215.238489] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1215.240442] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:58 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:58 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:58 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) pread64(r0, &(0x7f0000019100)=""/179, 0xb3, 0x1) 22:22:58 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:58 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:58 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:22:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x6, 0x84, 0x0, 0x7fff0000}, {0x40, 0x4, 0x8, 0x1}, {0x2, 0x2, 0x0, 0xffff}]}) ptrace(0x11, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001100), 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 22:22:58 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001140)={0x3, &(0x7f0000001100)=[{0x5, 0x4, 0x1, 0x12000}, {0x1000, 0xe1, 0x3, 0x1}, {0x9, 0xd0, 0x3, 0x7}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rfcomm\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000100)={{r0}, "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"}) finit_module(r0, &(0x7f0000000080)='net/rfcomm\x00', 0x0) fork() [ 1226.557481] bt_err_ratelimited: 6 callbacks suppressed [ 1226.557507] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1226.558740] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1226.560238] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1226.563000] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1226.564499] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1226.566184] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1226.566217] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1226.567626] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1226.568684] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1226.569588] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1226.573132] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1226.576889] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1226.577513] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1226.578316] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1226.585461] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1226.585504] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1226.588437] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1226.589845] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1226.591447] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1226.592375] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1226.593552] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1226.597615] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1226.599632] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1226.602645] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1226.614800] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1226.617794] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1226.623660] Bluetooth: hci0: ACL packet for unknown connection handle 200 22:22:58 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:58 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:58 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1226.690687] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1226.691764] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1226.696237] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1226.698939] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1226.700567] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1226.703244] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1226.704587] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1226.710701] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1226.712084] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1226.713551] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1226.714908] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1226.716337] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1226.744550] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1226.746176] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1226.749281] Bluetooth: hci1: ACL packet for unknown connection handle 201 22:22:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x100000000000000) [ 1226.751230] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:22:58 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x0, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:59 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x0, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:59 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:22:59 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001100), 0x4) pread64(r0, &(0x7f0000000000)=""/52, 0x34, 0x7) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0xd, 0x1ff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)=0x1) [ 1226.857698] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1226.862149] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1226.865771] Bluetooth: hci3: ACL packet for unknown connection handle 200 22:22:59 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1226.914344] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1226.923226] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1226.924724] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1226.926429] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1226.928148] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1226.941260] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1226.942629] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1226.947439] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1226.949952] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1226.950945] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1226.953068] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1226.954470] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1226.956303] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1226.957768] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:22:59 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x0, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1226.994642] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1226.998439] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1227.001406] Bluetooth: hci3: ACL packet for unknown connection handle 200 22:23:09 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x0, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000019100), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xf1, 0x7, 0x3, 0x2, 0x0, 0x365, 0x201a0, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x4, 0x54, 0x3, 0x0, 0x5, 0x6, 0x6, 0x0, 0x47, 0x0, 0x20}, 0x0, 0xc, r1, 0x1) 22:23:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9effffff}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x12f0, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "2472466fb93493d1316e4c4abde990d68a198e09a230b28109c8077138dfd8b79a055f37d558b5c70a6e61340a44ea682c48ec9a27df22484454482e17469fde51da329064b4f6193003211930a409c99bf9158ae962bc32a55167df6706a4c14bc796677a69f2bbce63d07915fcfa023972088310fd97588b968c5bfc3fcf541664923afd86dd40e8a8ac6bf874b30ce064d44291b4fa59e90f60d732224869ac9b4d201f4f8bbab643eb37257be1a5dc3bcf2cb1b49c2085342fa02622c748f46ccfd0837d"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "bc129ae658bcccd470e074a23fbbc5ccab03c961fffb3a66a769675c35130035c1a080b4804033d5ffce405f05277aa13051369a12c21b742f75e80413fb13e0d3fc2cc18f44c8d4fd1f16063188365507926c6110d3469435f38a0cfb7e1afd1e643fd7bb6451525a1bfb8102aaac23876baeb93a4fd20f580d84e4d075403f823d00799876"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "7f2bdf3a563f85d9648c2263be92fc7e89e5934401121ec0326c378cf3e450113ea34f0ee45f79"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "40250c358c4617576f53781184230ddda701"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "bf2a2e12154e0394c182b6a424378e4c029e796db65cfca0f55abec5aca50a5f86bb446726ed71b32d2d770d83e81c3adfbfd372b80471f9"}]}, 0x12f0}, 0x1, 0x0, 0x0, 0xe456f7a117cc6c4d}, 0xc000) 22:23:09 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:09 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:09 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x0, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x8000, 0x0, 0x20, 0x7}]}) fork() 22:23:09 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r3, 0x1, r0, 0x0, 0x80000}) r4 = fork() ptrace(0x10, r4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x6, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20000001) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044805}, 0x109ec4acad815428) [ 1237.644218] bt_err_ratelimited: 12 callbacks suppressed [ 1237.644243] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1237.644536] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1237.645476] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1237.647225] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1237.647327] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1237.647833] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1237.649477] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1237.650148] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1237.650562] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1237.651090] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1237.652231] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1237.652367] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1237.653712] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1237.654037] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1237.654116] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1237.654144] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1237.654173] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1237.654268] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1237.659859] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1237.660478] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:09 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:09 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x0, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1237.715498] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1237.716641] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1237.726641] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1237.727048] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1237.729095] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1237.730673] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1237.732677] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1237.733541] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1237.736690] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1237.737514] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:09 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1237.745408] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1237.873371] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1237.875008] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1237.877658] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1237.878397] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1237.879033] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1237.879625] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1237.963460] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1237.964126] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1237.965384] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1237.966004] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:23:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() ptrace(0x10, r0) fork() r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xfff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) 22:23:19 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x0, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:19 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:19 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000000)=0xe) 22:23:19 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000001000000180000006bdaad629029b06ccaef5848f627e961b7f820f3cd7e1d48eef11834ed96a4868e89", @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00;/file0\x00']) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000000)="4534a1f3cac947", 0x7, 0x4004041, 0x0, 0x0) 22:23:19 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x0, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) [ 1247.481076] bt_err_ratelimited: 3 callbacks suppressed [ 1247.481091] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1247.483437] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1247.484212] Bluetooth: hci7: SCO packet for unknown connection handle 201 syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:19 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xb000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000180000002f63c681174e0754f448aeeddc1a4c1e8bd3cd04af0c5484ad51669ae86e87b403ecf431310baf37b3839305b1b766cda75321b8fa3106eef4d4e2c7c843706f2815b1f8bd7d66deababada618c7c3e08e900d3848f95de36964b36b4d79dab5b0417c67601644b1dc32040e4e863e8df139395dd6d146179b1e6bbffecd32482dea2bd62bc1bea67efdc38d57e1a823b906187f5aefe6798c5acb2677bf4a01c81faf4af57d529ed9825e42413c6541724ee342e910abab4da81849f2ee15607980d5", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) clock_gettime(0x0, &(0x7f0000000080)) write$evdev(r2, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x15, 0x40, 0xfc}], 0x18) getsockopt$inet6_buf(r1, 0x29, 0x8e, &(0x7f00000001c0)=""/80, &(0x7f0000000100)=0x50) [ 1247.486021] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1247.487917] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1247.489289] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1247.491960] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.493057] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.494113] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1247.495099] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1247.495715] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1247.497631] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1247.498394] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1247.525673] Bluetooth: hci5: SCO packet for unknown connection handle 201 22:23:19 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1247.525778] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1247.563392] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1247.564691] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 1247.567727] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1247.568675] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1247.576238] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1247.578203] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:23:19 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x1900a, 0x0) [ 1247.589404] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1247.595609] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1247.597643] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1247.640642] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1247.640722] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1247.642448] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1247.646227] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1247.647740] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1247.649140] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1247.656744] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1247.664723] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1247.667638] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.669338] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.671769] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1247.673269] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:23:19 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x0, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000000)=0xe) 22:23:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x6) r2 = socket(0x25, 0x3, 0x101) close(r2) listen(r1, 0x200) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:23:19 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:19 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1247.811635] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1247.816804] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1247.820795] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1247.825413] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1247.827708] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1247.831740] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1247.833313] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.843772] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.845181] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1247.846703] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:23:20 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) (fail_nth: 1) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:23:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xb2, 0x0, 0x7fff0000}]}) fork() 22:23:20 executing program 7: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28952086e59b9822f3c3faf071d412d51eb3de098d452dd57a83b5c96bcce6e6dce1f93570fb8e3c720c6f9025021595c5aa17af37a8fc94", @ANYRES16=r3, @ANYBLOB="01fb6bfcff000000000017"], 0x18}}, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) ptrace(0x10, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 22:23:20 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1247.883355] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1247.885224] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1247.889220] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1247.893305] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1247.977641] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1247.979229] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.981335] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1247.983472] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1247.985439] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:23:31 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:31 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:23:31 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:31 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r2, 0x4, 0x2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) fork() 22:23:31 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r1) syz_io_uring_setup(0x18cb, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 22:23:31 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x0, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:31 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="32abc0bed58b451f252df472c6f5a4886473fae1efb89f808e035d5f99d52936ca2ea63021b17345c7cbf937fba50994a00ffa0e10b6c1f0a291155b233b67fdad71468a2d65b317c85552d0af72a2cf79362ad830434799c6d440d63de5f86c12e35d0c3d8ae9584c9ad983b07679597aebac12ddcd30fdc0bdd3b94a6c0657387e5d6f21c915ac3aef958716e1e9d1aa7c83347d5eb89716b4", 0x9a}, {&(0x7f00000001c0)="063515e65c09ffe272c08f96402ff352733d92e769f2cce94ad26cd2203c331bf37af1b6b2c572be29c32f00fd75d299d0dbdeaf74d4386b116bb716bedfc8a2baee636caeaa2eb7bd684466a5800a2faf5e2af9c7db228234b889cd3f0211dca581772560c9ae3d8d6c8d372622a47cf428463572ab107f7cb82055b45d3804d401d03d5591f880784b6ca0606fd92dcc28b87d0a2104ef3c7b", 0x9a}], 0x2, &(0x7f0000000280)=[{0xb0, 0x107, 0x0, "1ed404cf1e003837a79c90fd54d4a2d508a3d051b0a6c95146a023c28ada80eade8af9f8d02afe35bad43c5f6c965b4e3b60c51fad349204fd3438af1d9793694682ae26c56860986566f43198cc5b02eb47c37db98e932ac5e96017b29697ba6fd00c627c3a09b24a8e76c0d4c3d930566c7768765ec2df008571f6c81f2f0b47069ba37c24f29769301ff7cf15158e9c56345d73423b97e44f55"}, {0x88, 0x84, 0x5, "f63c6a2528f0d20981b5a4585945847991a7f795497b9516ace392280f48f4788780b14f7417613b63e6ceb2b6e831d3c7b94df6dde4a289b63ea97437a0a97e557cd254e3cf8a63ab578d8d5c9449ad2cf50e3c6acb562b3244322d2a7b266ef2700554b45b4fd27a8540ed3231659e180e3d"}], 0x138}, 0x4000000) r2 = fork() r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fork() waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r4, 0xb, r3, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000200)) kcmp(r4, 0x0, 0x1, 0xffffffffffffffff, r0) ptrace(0x10, r2) 22:23:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1259.229185] bt_err_ratelimited: 9 callbacks suppressed [ 1259.229207] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1259.230582] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1259.232114] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1259.234985] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1259.236531] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1259.238024] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1259.239513] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000019180), &(0x7f00000191c0), 0x2, 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) bind$bt_hci(r3, &(0x7f0000019140)={0x1f, 0x4, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000001100), 0x4) ppoll(&(0x7f0000000080)=[{r1, 0x248a}, {r2, 0x4030}, {r3, 0x4}, {r4, 0x2000}, {r0, 0x40}], 0x5, &(0x7f00000000c0), &(0x7f0000019100)={[0xa2]}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x30, r0, 0x8000000) lseek(r4, 0x5, 0x3) syz_io_uring_complete(r5) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:23:31 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1259.275451] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1259.276251] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1259.279205] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1259.281444] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1259.283350] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1259.283393] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1259.284198] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1259.290104] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1259.291593] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1259.293043] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1259.294470] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1259.298640] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1259.304669] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1259.363291] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1259.363695] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1259.367159] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1259.372226] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1259.376324] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1259.390529] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:31 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1259.400605] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:31 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:31 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1259.475288] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1259.475665] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1259.480506] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1259.483752] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1259.486336] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1259.489487] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1259.492225] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:23:31 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r1) syz_io_uring_setup(0x18cb, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 22:23:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3f, 0x80, 0x3, 0x7}, {0x401, 0x2, 0x7d, 0xff}, {0x8, 0x40, 0xfd, 0x6}]}) [ 1259.528404] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1259.530461] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1259.534691] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1259.537331] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:23:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) pread64(r0, &(0x7f00000191c0)=""/201, 0xc9, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000019100)={{0x0, 0x8}, 'port1\x00', 0xa8, 0x81c0f, 0xbb5, 0x30, 0x7, 0x2, 0x7fff, 0x0, 0x5, 0x3}) [ 1259.609273] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1259.618177] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1259.619628] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1259.621676] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1259.623115] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x401}]}) fork() 22:23:43 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:43 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) r2 = fork() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) r4 = open(&(0x7f0000000580)='./file0\x00', 0xc40, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/204, 0xcc}, {&(0x7f0000000880)=""/199, 0xc7}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/68, 0x44}, {&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/178, 0xb2}], 0x3}}], 0x2, 0x100, &(0x7f0000000d00)={r6, r7+60000000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r10]) r11 = syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x0, 0x5, &(0x7f0000001080)=[{&(0x7f0000000dc0)="5b4a06118e2a46feab44785001e56faef53c117beb1bc39d9d3ce974b34a54ba82c3de07d5dbc881491623e184970cb89d9a29b907ffbf48d6ebdd5cc7e033443daf44274e", 0x45}, {&(0x7f0000000e40)="5936fef0bd5c9ae83c7a14110c4959a9d45cb4ee15bb75280a6ce413fcf81540fd4a88ccd8fce40bfa9e8aed12332dca94af4b1099621a76f67d58da620ada0f88c0b0f7b46302be96a3fe060453182d03a513e6958ef1745982cb57b6", 0x5d, 0x20}, {&(0x7f0000000ec0)="c68e1da27bcf03e774eea7ddc55e30f00b6064d0a311e4ef30ed9f01a32014b47b001db4dc2419601551b8cce4536e80b07816f9c7643b6970de47af7af5da2740c7", 0x42, 0xc9}, {&(0x7f0000000f40)="45b297779694b21e2f958b1b5567b3fa0dc19dc08602ca39a9ccd9aa1d81565329ff3de858ce5067df7dcfc0ca9942608362b69fbfb5e63cd75086c3e2d1a6b3e0ab9b4cfb46670a0b358e65f02e0e4668d6b798f7e75370f69904d557bfc8c18c2cfff098b714a035abdda9c9386472f01e2f9eb8c8076cef8e8937c8cbe470ccf7b51435f3e9c4c2da77324718f378f3f7f980acc6525e845429bcc07f34bb025ef3001282a1ffd58ad3046bf6103fcbcc02e93bf9cce38aab268a780a63e71def3db7de10a700bb44259673f5257fe7ab9553f2430c5a91b94311b4e1d33266a059689b84707fe47fefbdd05a886fa5055dc38f80c4", 0xf7}, {&(0x7f0000001040)="06987204cfa0a2b693cea02a449ef38754c252246aea87155f5b59cb79d60062365d51b861d3312f7659eed4c15bcebf63", 0x31, 0x1000}], 0x1000000, &(0x7f00000061c0)={[{@hide}, {@map_acorn}, {@mode={'mode', 0x3d, 0xff}}, {@overriderock}, {@nojoliet}], [{@smackfshat={'smackfshat', 0x3d, '^'}}]}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r12, 0x0, 0x1, &(0x7f0000001100), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006300)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2001000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000001140)={0x1b54, 0x42, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x135, 0x6, 0x0, 0x1, [@typed={0x4, 0x83}, @typed={0x4, 0x5e}, @generic="8003aac0aed24343fa7575890cb566d1069819e8e3a0ed1b", @generic="c8768574238097a65cf47ddd591179817e0cfc29be15564cf6c45dad8c9991a97b99c7b37772c3fa2b445b7445d62e99515b0b29529050ceb45dfa64ec10af3f35ed86b4e1d1b5790b9cd48f1e964c3938d01b825272c5361be3990839dfa22310a07f7096e2ef01", @generic="a1bcc9b73dd6e75f6f6475a070a8fd9908d7e39e332e046613638532381db2666f0b0dc4991c55a92d31f82852d1f02ac2ef1f580141a833ebb1c6e53083353b46a6c843db672f745ffc08e826ced490ede274cbb4fa16e3bd2a38432bc6f06bc61f8cbeaa5a8f197b6b0291feec0c256ba8f4e71f437cec3599d0b2e8191e0684d9c8e6dd292185f17b269d38d8f05cf6a423f64a0a14ae5a91a97df3445b793d389fef99591a1581"]}, @typed={0x8, 0x12, 0x0, 0x0, @fd=r1}, @nested={0x362, 0x54, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r1}, @generic="92de8105c4be27e913ea6c3619e021db062bac0878a54511a8884ae54558682b5e5a16be2b933bea07ed886221216a254cbfab67e8a50f05feb2979cfe454dda6feab59d20d941017815d502021bb45d4d730a0783aaecd3bd9e047d9154b0ea7744e64eb9bbcb49a515fbc24fded61f182314be1b26c506dd8b315120056ed6827df8d48f669bbf8beb65cd3e568802ee2d0e15a911dbca2cd749d40d7b602e525287", @generic="24a5bad896fff5976a9294675645d0b5080b7ed8fc0a932ea650d495b8a2dec613419037ce6f24c630c8fe22a2bb874ac77741b6aa62aa804a4a56bbb61fce6fc6491aa1a90d9685bcb53d069e68e4026c2dd1e609c5c5ef300727980f32cc1061f7fc8f63884e901adaaa2bf769e964ab421b765234ac9f55445b9dd209fcf5839f23210ac8f242812741b5a60d828840c783999703fbe8d4e19810b9d6ab441955db2d4be9f70a6f9f6bc0b969fa1a3d2d1228550bf089cf952f02ed15a357390a6a0a", @generic="add6025d3c7b013253c4052848380c62cf4e6d020724cbe9c4c882d095c807398075d34b22eea0d2286e72a32a1f94d1a569eb8821652cc71080e6d8f170662ab7a991277aa459cff58713c412da", @generic="821b587a97da7b0bfbaed3c2b4643a088da259bdbb87776eb4f6b65becc98507835a01414e69abf210", @generic, @generic="c3fbb64de8baa32bf4db6f3e01c1ed8983bb5585f0efb887ea8646f5b8c333e74ae1ac2ec5d1e8232906061bf2d96d9cfdeaab83281e3cc563a1e3e20b0fab4fc22082c37d14fe41c84fa3b6d2836eb60e0401e7f41d16e56901be4445b29e8dea8f6a460a2df7f45f463342da6f269d00ad017decc67d27220451177f5e6eec1164d5c1dc0a65bbe969e293b5ef1e95b7d8355d74fba6956d3dcbf2b0aa592ecdf59a2dae6e0d70f8c9c7346831c64d865ae5bd00c00e7a1329e788782d21af8502b65f9328e9d6b3e43e85dc6f02badaa121d60ec95e159b3f2d29c0d52ab77f499b3f6d38b2004112d83a0513d469a9de", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0xfffffffffffffffb}, @generic, @generic="87bd3dbe4dd46e8152f24e08d4c685684f999648d501b785f31550bddc36bf6d8ff6051ef2c356628d9bb641e767b0af366b963dea62fe33cdc5e8cd25e3a5868cdae2998d6dba2c9a0d773e7a9ce36e0712694560df1af472c34207865d02185296d3a44e0b778ebdf2b702553dfa07555743c3a562beb6b7da"]}, @nested={0x115, 0x70, 0x0, 0x1, [@typed={0x42, 0x96, 0x0, 0x0, @binary="888c039d7de16017de19eb04817e2fd635c16489b3a64203ae8daae6841a518a4ea5f4805129d1bd26c6a57769ba29b8403c0fdd831daa7f1b32b94ca9cc"}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1c, 0x0, 0x0, @uid}, @typed={0xd, 0x16, 0x0, 0x0, @str='-{*\x88}\'{*\x00'}, @generic="2e967af0635da922ada9e0070f6ecb55b6b1cb693ecac7d356fe5ef030f473fd6edf1e632d21f12ab3e806b728c7291b8f8f989773dee3fa92607e28505a5ff81dc8d74a77516b074d699db0c84932f63ee4ec9f988c8b6882f2c16f69207cd43d60230e5b72359d13ffbba1635e7f4bb11b1383b7472ad71603cc2dc41a3d889227d0abe23f5e870c33f06518c60e081a67e730947a0716274191d16df598d8de787998be907f63a7ee2a7ebf"]}, @nested={0x12e9, 0x4f, 0x0, 0x1, [@typed={0x4, 0x5c}, @generic="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", @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}, @generic="40d7fa818ba6e79f41042744c62230b40c458379a45f8ff64852d02d4fab4ce9a09fb3cd18dfff0d6008b125cf2ba9c108448ac0929a617cb2b102a20008dbf47b954ef59c56b8f6bcf50775325c9173bf770560e0c6ea8603431de954fe239fe76c2fe7b0f0aa2503c2ee37a7da35a20c838d1281348f54d71738a31083e33a82b6602490823207e455ec5fddcdd9c5505127b50abce408ddd7cc4c232c76", @generic="b06972c705b6e600ce2323a10a7f0f00d098d0a1f5427a87e854ab7101ec5245cc05fae53ec4f04f2b26d5d0213fc678c4a14f82ab9350c30ee101e44e426d90156b9409037c2c0818982924ff95a4e1a392ca00ce2c52e0ba52c9b68671558e0529c496a0a3ffa9de1ae1ea8dcb56d2c6f08f4c44bdb64411306945dce0d712437e08fd68af9bb52a97af63e0daa0dcd7ed4e4c57dab727cb0e13d04d23b0313ee83bf273ca2d49dc2075a0", @generic="e4049f93275230297445169e3cc4d835740e9add7f1b2fecb611a63d9ee66ea39c423296161fbf0ab5cc1caa39f1c806a44e809e08d9d45eaf1a8629d76059aa8878d0d18d198ba949796a287c827e44e4f319eb6a375922f65b3c05a93467404ad93ca206efb9edd4c2d86fd02cc55d4b33df1e7c081d2bfbc3bc71b827", @generic="9f720bbedbb3e0b97aeecdd5a39b5af2793acca8be61bb234c8dc7d5504257d83f7d7f3fe372723fbdf59394353a381b2c6cdc881cd4ee015c606c8acc22ce66893e351e4e66b16ae5d07ed5b3a4d6ff8e569136dce0ca1e7a10b8d24c9a6343", @generic="ba24c16f8412be517a4cec8bbe4b2853486d42bc30cbbfee3f2b312fee7365d2f90d998ca46668f4c340173178658f457ac6933451b90c39cff0d11eb9edb2fa6c766381bce461528988870d576a5b1295247fc7bcda9c4854faf90d9164e11bff848c8561511b8f05cbdceef97d15268983d680b1beabc6b9ef42f64945d4e0d5f13a9c40e0af3a28481cd470328a2d4d2cf27bdc0c6ab3a4723948ea5eb414aed1e034649fd44054f3aa7b", @typed={0x4, 0x94}]}, @generic="9b39877070ba3ea6bcef0842b14584f6c9734162e1979e13443b08b4fc0dd2ca975cd75607d16d761e689a6b842473e23fb5dd91baa09f147a1d9ba0ded83dca2ca4d8007bf40614b92b78aedee5b03650ca871d3be2510ff0ce2f5116292174bf237683957574b081bf351838fb729d0c426abf4852828e96e9f868f5dc8a387dd74581225115b0c7e46137f6b0621c1118ac5493c432642963e544b8a8696fdca693caee6c9577ab2b4b7a9fd38fc9", @generic="82c7bc655f49c0f298113c79b9ad4ac5c85de88b9125b604e42254fb05def1ade71d4e2197ecb817a2c8a04c0c37a848f9b7a4a46d79dd976afcbcee82308f4febc8aba0ad9d32f4da57bd0ec86f09823640d33e25ded8e19c93ee2e0ad39295c3", @generic="a5e607c845e5b8343de49e3619d2b2c363708f6ee8d27915eff5922093c7c0f9321f7f070c7743ff27c2f82fcb5e8f443b6f6c97d56c87979f8550f166c85045496c926bf62d1ec823a990887cb1cf178b470cfa9b2d9f45f663c07fd7ef1f41977ee749734d5649d84f77283a3d1d06276495784ef92bb86b029c52553af59db0130a2e3de4b0d5248b962b6ba60d101fefe8af0d980015ac2c0c7253b92d97c6a6999fb14c99e12855573cc9778afc7c91c22682de8c030deefe03d1012cd85db0dea4b7de8fca5e869bd50e39a7d7a8a4432372b55dc5cbd4f383e4410b9e9e7a0a417886fb417a0891e06a7acd", @generic="96b00900e041e44921c72efdf9c2801b281eb67c69e069a6137244fe9f620b795739527232e427b9c1aaa1cc7724fcab5aee23fd804af5245931f4d41bb3a4ad29053801b409be308f108787052a3729f2141bcc1d3733d80cc0612006f6013874d41d3bb2159297eaf36a134fe35cc750c0f6a8ff69dc533a1787a95d9660ff1853cd98c138888d2d08e3dbdd328045ff36562737f5e50fda9dcd4a"]}, 0x1b54}, {&(0x7f0000000300)={0x124, 0x42, 0x100, 0x70bd28, 0x25dfdbff, "", [@nested={0x111, 0x34, 0x0, 0x1, [@generic="6bc016841cf9189266892a1b5e69c481e53380262217dc9f4111159a6841acdc7733ef68d36c0b000c8988db1b1ecda17267be7150d78249cac584e14c15c5f3506a14a727e02dc13c8e2fc1467a9aef2f0ee92416898be837200d400a776ebf5a54fb8f9320364fc391fa01f3be3f1bd001ba614571e49eda42c5eadfec037b847345fa9f74c951d7a2035cf5107d78c8b2c5505ac52b09100b8fa70afb270bc56dd0367b0facdd0900bab9d56feff930cd04c51cd6b253ec36399270beef5f6f73cede48a390b5e00725ca1097e8fb80bdf967732019a2ecdcd5a3ddbfd67a350041661e8f8975e84782e72b", @typed={0x11, 0x26, 0x0, 0x0, @binary="e8ba67657cb0d895507b7f270a"}, @typed={0x8, 0x50, 0x0, 0x0, @pid}, @typed={0x4, 0x3b}]}]}, 0x124}, {&(0x7f0000002cc0)={0x24dc, 0x18, 0x0, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xc, 0x29, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@remote}]}, @generic="497ad682cd0f37157b20bc893f3d661e0a966ed2504038737c874e9545b17690476e9df3232dd664bc00198aaa7942930a30f40bf7098075ce5672df29ccfac78a7f3a492eb471d0e8cf0df2f02d53ef982a1136808681e618f83179280128004055e9201fdfab916df59f8a3aeec0ada036dc4296cdead231cab0efa4e9a1af23a020840d4dd754d8a367a7ddcf40b63aea71c132d2d654a2966867958271b4bf0707573f83dd12040caa88e90f0f8d9bc1c35fc151dcce44696611e5143b77bb872f0658d19a7cc122e6806bfaabfe8729d49cfc4d37d4b1faa6aebffa5861212aca650e9c937e22e316b2afe88e278176ef6a364e72de9d48bbae911deeaafe3d9aba50d6fac86d569eba9610361bcb388b22981cfbe66eabe1142ac874580930ec257bdbeb0e037c4c247d27de207978f9ce3e3ed726b795b2a53311592ad25bbae03dfe451d0d6785d6628aa78a28b63c784ffb8d5363e881c750e7afda86056bd4b18675a21a346212fc8f42343b79116765f25cce4936d62ecc5484fd81152c3ed92a2ae7c79f33196c5f6bc4f67b9236f213a87a6a65a2847450886885c2c38f984d34b22800848e62f3d2c5c0d44c02abf52be6aaf1b9e389a3f0b5ce250f71a072d02df17e92254e21e9789a70ee262075c8fc010e44e1b65a728d3ddd71abc19883b3b097b42a9f7c3f1654410fea3148d2cabbe03352698ca3f485eaa7b5762c7f2d117e79c973ab7dd6ef4233479c487257c60f3c112daf0c1e39eeefe75272be53205d52d071470d5271e382572f04a3267aec105a5c3014eeca6f24e0f65326adf67f552a0325a8e0cc3460d1bc86475a4920f5f08aa89af104fe380a87871008741f72c005b705ba70f4d8bc14e9faf12a69caa7c3722089a2d96c35953b5619ce62c080a70ee78f2d76212448599ff83d397f5de56627f54331c4c0eb64e4914a775893b2c740209296f943151a334caa597aac8f8bf3131baaf46ce2568798dc497bf3d24a5090ebab68a63f8a4502f8a16d370fefd00d18baf5fb74f8caa1a069b522b0f611ad78af9fa37e97ed254918fe49ad1130ff1e5b984e6d0e5bd7d765691c61791a3fb5484a690653fbc39777905fdeae22385d1f498c1936c4337aac90a80cd9ad93480e8aec3589476f4ec60c12cac9a92f7c3b4891f4c283c50a919fbf42ea589665b9d95b2f6832c3f5b22de648f1d0a71d66efb1a8b64fb4b1e7da8c01c0c466299021d126836d7fb456339c887a100feb5d195497fff7fd6e778d47cfa1939a019ca8ab736c620eaf8108f3920139baebe8565e228d77ac60c20fe1e78cf14fab80a914bc78b7477acc3ea97a62a1c626fe6aaac98abc4e810c6c763cd1bf2f8c2c11595e3f25d0ceb27847485747d2a618e942d069710ca12cbada977ab3c788abf1e70f1c72340643ed2972395e966f3b3e37f0b24a1526cea6603c80d7f1d36b5e444498f406c89149f2c0522fe864c5baeadcd780ec412a9dde80c827bca94c456901e133c642bf8d46027e66eb71b9ba4b84b93cf70603f1ab8f0ae0fd708b2579dac78d3ea63de4084ce6dfdd810d6f5087ae9643426e7ca092c5c8bfe951ae8bfa1a0e15c4edf9083c0ddffe5418787444e5d68edc0726a4e396cc81f26eb449583a2672ea7ed2ea78e3905d09257c9efe9919598d04ab0b193be105ee4bba12e569e8c0cc56b3998a827ef54ee48a309bcd812b66ec8c4360801c11baffba7f94c37ce7b74bb430e95d5b6109f961a795b559f3328f331f5630e67548c73d319c6f62af4620899f40be6ff7f84c6bdd4bf4aebdab5fd69ff0b25af02d697e545124fff56fa17b36ec3093f29cc7d7419bcb31d05043851b3c11e31b93cd6bfa7421d9798daf61acce51d540779e48ba61cb83d32ff7e13e3d142bde9a115d38e372df860f054c9ebdbf09ff5909da9387359e65a40f5a468266259526cb7775a482722dbad2cd5a4fb5fe26df32ddc8c2be4e89c2549505e1eaa1280cde05adfd8b552555e81af16e8cc548bd3bffa80cdc003004893e14d4d07af617e380ac07305d0f0bbaebf3fde9e2ff6cdefd62c9341e99a8a7e2b45a4ee8a78670b6b1b3094c36819a8915be718f076ed353517e8cc1ea5e459383d27cf75dfdb1a4d513f8c308743a83c5208fead15d9e255fbf141bc2715502712c320d1b77a1612856033c2889ea085001917880ee981348df0e738102dc17b708ab60201fae213680c09b0083c88bcd7283e389337c103c63e62e7ba5488af82781185eeb688658d7d4008a161c2054789cab9b1ad9484eeb2d880554b666891e94b1dc6ab74d1e2c7c3b66f6ed021a98b14e8a5ae0b5534c246eb45858b14e227772a772249cdfaaf58490484f9b988448d613e1c62a89673a825c284794a9fc4f8a35d4e3b4da70991aa76ee8928bfbb3adfb048634085b9d749f7e885b7eb8c6a9cc511b69f77dd74ae287a2af1fc23a4d3dc0fee4fa968a98293ea83f6cab8af28275231dac8ca4ffab69302f0b6762d900827a50a26f2d51500d20469c000294d81d18b10ac9a7d4e81825ef8df4aa275cff01d2fcf5d72ea315162e68d01ea3337fa917a80c5bf52acdb60c0114630d69198155b7ecdab4ce8fb6e7e1fd59f82b5071aeacabc695749c2ee7cbb7967810aa5745d24c8592abe9ecbc1106d28cd804992d9a73eb22f7a6cfec52bab1864da442f8e8e95d4d8baa7b093f2b7bcce258c6da2a75269dfc64ba047f9ff8b7e945badffdab2dc8b4882a8ed9acb02770243fff0dfc46c0916175e55169064ee33eae773c100effbfb7c82f14f12049d4c67bfbd88bcdcb2e724ce2ab33b7ec88fe2ee32cb6cc610c371ca891096462591cc5ace186ecafee12589aadf971d2b0bd75cc29888cd50334a84504dbe159f0e3032757d3cc3d5d0bf9134486e30201b61b7a7a3ee7417d8ffbda4adcdd52aeccb6b38506420eb03d9e2becd960251207d3fa9634ce4554706039de7d0bc00b1bbd5669afafe32909137c0870e72b56ca75d06ec0c78907ca9ea014fdc4b1f0b20c7f9bd588ae1b95f13dbda37f527b7018e20ca8e66c24d3be87f4fe1ad2a5fbc67979a9855ed05436497cc30e04005f68023e10a4a14244eeb32b00b856a251cc13b6d2abb7dfd0a87e0675584b414a6d8deb3b844c1547c8fe03e61be2b89b8ccca3b84b75f5acb9e3c7c540aba4b47ccf48fcfa822487239a0522a65e5fad9b0e8d213b5daa5bd2b42cd9df784320464f131b0848d835a70196fc83a6a794724f3cc3a33343ecc73340b789dc5d77180c82f5476cbbe56678cc0b30af531c2012f85288c9c8203f1a9d84291a13adb0b149109e6b4c587c0bd776cce39b36247f863b3479af859f6ba141570c43866b60c5960100f14950b07d0a05c0496e7c809a1695afa12cb92b94bf2520b1f284087473032cc331c35a0edb46b3d22488c1ee689e1039dae0bf9c570c84eb27517e65545d53ee873b1746d5bb3a55710d14ae04a6183d712cb96ac279c801f9979e5f3b6457a0cc8cb985d8013050da780700d65d7bf3e5341bb9b56c6987fa9475b60106d72071b5f80e439222036a8fa6446e9af6e6de8ba23afed98fa41a8c99babaeaefe5d4eaac61dd00509d8320544b5adc9aaa4d1af86b9c4b67e5550bae604bc262ea0c1cdb2461015da3d872f09750c176de07c812ac83f7b8ae81ff4dc9c4b39501e4c8d02302e68336d859913736bf8c7ea4f32a0548497da011024d07131038ae57caa347829a48f047adc33492d45e0beb5d9436600c067764e9f6bf8157133f9d0704077112d3ed68a5090eb681b469625db0346f0159baa51f1ef6bdaef3819a14be3da818179fa97dba2d1437865d010343882e011205cb427cd5768eade2dc1240b72f74697b0d783373e8ea80ed92094a5c052b7da168bc85b0e643824fb16c2819d48712654d740d1e3b5fd62b56ba32bb1d4892826b6dceb7e810dd3bd591b7a3f2547ce1702d436b6672cabf8d53f021b928429a0a100b8fcfa6f1e2724c1ede867f03027122ae67abc1b80ea4efe4a1650ca5121fa7bbed92d2e5fd02a2ce3452e2566649908c6f04215df0d499f5a9037a2aa37d286dad407e97c125a68a2788eff01112613f10ab475425768b0b5bd15ff7bf085330b97bff8f4372632a9f660f60229877e148474b20337eb7a488318c25809d19ef19ad22ce0de66d352601529d90df25a5592a375d782005b5ff94b55b9e0b0943512e1428d0adb1804e8eee4a81814bdc926a262fda9c07a700dc4f265cff16eda67714adb2b1ec1826a3b8fea22a29abed4ff77d5d2f71098025587339b6cbd9627b8f4e5d676e010777589d048f801cd35d014d4f678ffb791dbb5675790e8c7ed0bd12964c47d8c923ea781c131111e2ec4b99d7168d05d34bef06fe96e6d9af6d83e12ac49dfe273488100fa2c5ec2a8788b9c389a5dccc0ee28670f3e24a475af30632db80fbd2aa5317adc4d174c78ada28e5db1e112772efd5461cc0c18bd30d32604151b06d5c2e02cf32f9eb807bf2de960b8410ad971fbde122e540a6fcdc4c05fc4edba66eb4c3feda2f5025d939a0720011727e6f7ef3ae922c2db96a62e5b543c44d3899dca5a24bcf3dd6258d20132e41e8e05b9566ae6b780a5ee97d65cde1a00f1912af3d8e010925a4282b7e101061208828fd73a4c1481f689b42781771edaeb1983df81cb770f9ee9902ec4f61abf72f098a5e69470b5692610be42962a8462aee873664eeac81756850aaa4a096a3def5a08ce1d998c2f8266e9b4b433fa7d95b5e545472a405150f44af37e4f6591c70c70a7c7d717cd53b65c48f554048cf218ac3f69e364db0b924b29486cca1b4fbecee22bed060446e7cbd9b31f9fc98a676f24669cb286d4c8b1cd65025f3157a01412177ede67d5361efe038d9b8628fee860772af5444c75acd219ef2f8df219858402648dd90a371fac5198a38fb6d608f050fd23dd800be875c414e1f1e97909baef67c89b9d5b4d0927758e14ef0bbb8fe254cc052aa09b1e385862941a53730daa7f022d2c6f638657d458721dac58d52c966a24a9ff9ba991d27ed4266f3db0325fbc22802c2d39901e1fa851e530bdfb4249ec0b891e5803109a8227a14e3367adc53f88a16035b91b9bd4796f342b60b858611f0a3cccabc4cbfcc31ce980a204c0681a45da217a6e6fed0750ecb9afc9944dad688b52b1e50ba658b77003c042ab51e6eccbaffdb5f95c49f74090133cfb24c900753d42836cd4887ad74882d427b95f02db5e0744f4d279d8a11e4e763186e060d25798615a6c744155f79e9bdf6af37cd8da9a19ac4a23239461c119b10676bcc56d6e32ab2abeb42a6acc6d15d10e5321ec8adf1bb7c4d9960cda7e2fd04abb34bdb168706796eae9ddae465f2bd2ff70fad32612d97f568350a09f815fc0b66693876f0c4f79fcd74207ef61f0cac85affd5d6a5f861f0c9627d363d1e7b523d601dbe9c2561b84017657be82873e1e5ec7214122bbd2b7a2e43f9f807b24082613bcb141e5440a9703fe2bed225369bb3db86afe57092aea4f7b1a3a9f8491ad03c29d15075ad37712a6522ca5e5bab217d3657ba9edc2dcefe986a01d6e19715b957f3d8b642b56e29af6c8d9bb2b529714cf1029a6dc02e72c33578ad9a0659ad7cd6bbdeea7068f55643853d3ca9c7ab9cee4c751080cfdaf376db0d3ea621375424fc08e215b05ec71df7ee3296887d0e0c35821dd890f77ee3eaa9b01096feea107367e8ebad7", @nested={0x8, 0x74, 0x0, 0x1, [@typed={0x4, 0x93}]}, @nested={0x1226, 0x1f, 0x0, 0x1, [@generic="c3aeec31572fd384f3bccf20ca34e1f04c7c88f617bbbb8ca35c1ca69c86b54d59bd38b311d38327c318102d91f001e34d4a82c8f2029249d4627146725c6ea45944d31babd25c606aa0768d1c0e02d865a6ad654be52d104a3e423d61572bafe5bc23345b66b22b364413e537cb3be4207c87f6bdd0f856cb3c7f2a347174021453", @generic="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", @typed={0xe, 0x2d, 0x0, 0x0, @str='*{:*\xdb(%\'%\x00'}, @generic="bbff8194204ffa17ccd25ead94dd1bd01b049057704ec322082e801bb68106534bd0be9b8df44a7a51c88da5aefbe38c4456beffdca86613d352ef52f90ac2cdf68d8b0a2805e8d253b6e0281e28d54ad3f983428734d8f1904d7f71bf5ccff0cf485b0619906a86cf601f8ece82f95b21b52b56033acfca7408a132a665a5462060047052ccc7c667ac70e8cdc9d705c5e1c67fc50e1c65d04b50602ade1d34cd5e8a6f0aea70bc82abc2d40a4147dee555ee0c3215252584b3304de870f4242ef1782110acab93c7c1b72f6bb9", @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@loopback}, @generic="b681c7dd992bf1a5f53cf1742de387d1dc8ddeaa55c985c939acccc340aaa478574486ba4336ba11f30558cf567d7c7b2b637f7c6ea83e50921ef08217bced385808062e9cb7501a5c753f7d4eb532f59d1ee051d8c2b00da4104adbd0a74d984c5dedde7473264f3692aa4f15240a147ada5d98e3b55365a7ad1332d7306531420f59016f9f2414bd03e1455a9202e3879a05fd87a0cb4692774939184507c711b1baaef2b3e33d02caf3bfa81044b944f4f6bbb8e102f221bf"]}, @generic="c92a34b095b9797494cb035d4a335377a1c0dcd5496abbc31cdc3bc7e1b567e46a6b1266672e0b374c3ff634e60b97219d380b3b1da5a5e14461cf43ca7162205d", @nested={0x1d8, 0x43, 0x0, 0x1, [@generic="a072d4ce4ba3680bedb6507de2d2e7e0883078f30cb654dc9f3890389d62931077bd8950e7f367aedff9930dccf500a9b8a22af5dd461496a6406cba556132a3016d28d1d72abe41548c26a89fa39770275c93295c01832543f2ad20eba4c68dad7278d00790dd55c40a8e767c86267ef2c614fb6f7de8decc2038065ba710f3018135d266c94f33c22d423d1e98c760e64db4463692f2d11b1c0f1f1df735fbd24c1ecfb0965659c6b790f21cecc96ade3a46cffe1fc1a0b455a802e764049897703a", @typed={0x8, 0x62, 0x0, 0x0, @fd=r1}, @generic="b4f08a243b6b0a4ada11899996c216a136f9803fed719c998c52b881a1a95d08e56b0c8db4499c0ca27628022362a664df6e65f27c171a2f2af86dd15f3d568dd8c870611352ec142fbf6d8667003ecb790124ebc08586d38835a6af0272f79f1342a7bb4a3d", @generic="abcae77dcecb529c6c8e6333055842315db7eff0af7056afe64ac9171ccc871e4204ea71d4b1cb", @generic="9e7ae42c4e6b0604b6fe8a4bc69867b80fe745d204a2fa1e299478de26262f5f3e29887364fe2b59893b010381a04d1ea281ba6d4efa56836c94980e54a3dfbf2d59faed9e82941ea90bae24097da8fd493a413211d37f5815a368e2d414065c03bb35bf9569c9da80934edb5c0982680ea2589754bcfcabbdc5fb4d"]}, @generic="75834f52a2223a5444b4c98474fc4a32ad19addd4597ac785d623f0ad78dcbd3900ce8aae4405237d3f860dd530231f5d9614d82a2992eae3586c0489ce44c9ddb33a27b132ad998ce676dd7b04d63e2f56c926aa9d2deba3e8f9c44f486088a8d08a9114708adc8d292d4e74298", @typed={0x8, 0x66, 0x0, 0x0, @fd=r0}]}, 0x24dc}, {&(0x7f0000000100)={0x24, 0x1b, 0x2, 0x70bd2d, 0x25dfdbff, "", [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x24}], 0x4, &(0x7f0000006240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2, r8, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r12]}}], 0xa0, 0x805}, 0x804) ptrace(0x10, r2) 22:23:43 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x0, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:43 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) [ 1271.483168] bt_err_ratelimited: 4 callbacks suppressed [ 1271.483192] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1271.484470] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1271.487201] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1271.497184] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1271.500636] audit: type=1326 audit(1752877423.729:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28759 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 [ 1271.504140] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1271.510363] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1271.512294] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1271.514613] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1271.516177] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1271.516633] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1271.519417] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1271.521274] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1271.522778] Bluetooth: hci1: ACL packet for unknown connection handle 200 syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900190008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000080001"], 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4890}, 0x4000800) bind$bt_sco(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x9, 0x5, 0x1f, 0x0, 0x337, 0x900, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x4, 0x8, 0x7ff, 0x0, 0x244f6d, 0x3ff, 0x40, 0x0, 0x20, 0x0, 0x100}, 0xffffffffffffffff, 0xd, r2, 0x0) dup2(r3, r2) r4 = fork() waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) fork() clone3(&(0x7f00000000c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f0000000180)=""/60, &(0x7f0000000100), 0x0, {r2}}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r5, 0x4, 0x2000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/255, 0xff}], 0x5) 22:23:43 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0xd34, 0x0, 0x0, 0x9d0850, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0/../file1\x00', &(0x7f00000000c0), 0xc8421, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,cache=fscache,access=', @ANYRESDEC, @ANYBLOB="eee5845187e0c76a51ac698abb8e603e58599608731f988c0d3ea451e325490f804fc31fa071c64da944c5"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/193, 0xc1}, {&(0x7f0000000680)=""/64, 0x40}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/147, 0x93}, {&(0x7f0000000980)=""/4, 0x4}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/81, 0x51}], 0x9, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/../file1\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r2, 0x4, 0x2000) accept$unix(r2, 0x0, &(0x7f0000000d00)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000cc0)=0xfffffffa, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x5}, 0x6, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)="7de9b5c851a08831743728930cf7b4c942ce85fbd9bd7063a3ea8737e2bc51e5b23f5d4e883a6ee9a195f7b27b5ca85aceea74b4a7542fb3c8097738accec433f7d643fb01977c27761b24e92a75e616bf658d694a1f360f459ccf9cd88989e12c3552479ddb77958c6e622148e569519e9b6a30ea9a76169012bf639516647d154dd184eb6362bf0b123d784a03f4c14cd061fe7fdf99d77e1cf00cd4f7f465ab96c8b089d5cb641de1d0e9c0e62fb45b2cbd3815bedcfc7318ea043e31a82607cd5d16c426b5844dc510eec5888ef1efcb49724bc633ea0febf058712de8446fb65231be595e6c69fe30dcff", 0xed, 0x0, &(0x7f0000000340)={0x2, 0xfa, {0x1, 0xc, 0x0, "", 0xed, "87878f7b779a0960c37aaf88d16e9c6b6ed9ef26346319307b656f265accc3e4c0fcf08bb68f06c5b20f51ca76d6502c0ef509751fd968a94ae88c307b1285c11d7c2f786efeb2607da3f5dfd9c2478497e2dbfb39abca68e2894e98a1a2a19880af3012f20eae466dee20556caebbe369da51ed7f6c63e165602fcc009ba90a70ca557560fc25dfcb7dc4d585b15195eba05e2b788c22e2778eebecf663bf458d90aef3cc8207349a0111855059320dace2ad2fb92274c13e17fffc24f7eda3702a4da139454e5693d9b820ef316add1ee47387c39cbb25511461bc080b149a5cbed5731f855816580c38c1a5"}, 0x30, "b5cabb45b0c377a9227067df9a5573d73a092145bc5c01bcdd155221e381c22587047d8c48cc3ef1b5d412145ece38f2"}, 0x136}) 22:23:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000019100)=""/232, 0xe8, 0x72e4) pread64(r0, &(0x7f0000019200)=""/102381, 0x18fed, 0x0) [ 1271.528627] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1271.529432] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1271.533540] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1271.536311] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1271.538599] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1271.540083] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1271.545329] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r1, 0x4, 0x2000) preadv2(r1, &(0x7f0000019480)=[{&(0x7f0000019100)=""/242, 0xf2}, {&(0x7f0000019200)=""/198, 0xc6}, {&(0x7f0000019300)=""/199, 0xc7}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000019400)=""/90, 0x5a}], 0x6, 0x8001, 0x0, 0x15) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0xffff, 0x1, 0x1ff}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000019500)={'ip_vti0\x00'}) pread64(r0, &(0x7f0000000100)=""/102400, 0x19000, 0x0) 22:23:43 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:43 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:43 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1271.821797] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1271.822218] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1271.825189] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1271.825643] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1271.827158] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1271.830504] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1271.830684] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1271.834236] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1271.834587] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1271.835674] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1271.838336] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1271.838671] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1271.841385] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1271.843337] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1271.873136] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1271.875509] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1271.880445] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1271.888966] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:23:44 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1272.119271] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1272.125123] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1272.127250] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1272.319166] audit: type=1326 audit(1752877424.548:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28759 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 22:23:54 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:54 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) 22:23:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001100), 0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000080)={'L-', 0xbba}, 0x16, 0x0) 22:23:54 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:54 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:54 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102393, 0x18ff9, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='hybla\x00', 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'team0\x00', {0x200}, 0x5}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000019340)={0x7, 0x3, 0x0, 0x1ff, 0x1, [{0x8001, 0x8, 0x1, '\x00', 0x2200}]}) ioctl$int_in(r1, 0x5452, &(0x7f00000192c0)=0xac) fcntl$setstatus(r3, 0x4, 0x2000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getgroups(0x3, &(0x7f0000019280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fchown(0xffffffffffffffff, 0xee00, r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000019240), r2) vmsplice(r4, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000019140)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000019200)={'ip6_vti0\x00', &(0x7f0000019180)={'ip6tnl0\x00', r6, 0x2f, 0x5, 0x9, 0x293119d, 0x28, @dev={0xfe, 0x80, '\x00', 0x17}, @loopback, 0x7800, 0x10, 0xfffffffc, 0x7}}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) 22:23:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:54 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r0, 0x6aa, 0x80000}) r2 = fork() ptrace(0x10, r2) [ 1282.608181] bt_err_ratelimited: 3 callbacks suppressed [ 1282.608208] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1282.609416] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1282.611464] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1282.613166] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1282.616140] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1282.617637] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1282.620236] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1282.623037] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1282.624382] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1282.625758] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1282.627302] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1282.628658] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1282.630014] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:23:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:54 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1282.700268] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1282.700445] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1282.703639] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1282.705270] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1282.705384] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1282.707292] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1282.710285] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1282.719668] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1282.721126] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1282.722670] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1282.751652] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1282.755739] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1282.759591] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1282.762522] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1282.764413] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1282.766395] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:23:55 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1282.777770] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1282.797308] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1282.801731] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1282.808701] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1282.810712] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1282.813422] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:23:55 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:23:55 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:23:55 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1282.884322] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1282.890277] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1282.918747] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1282.920374] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1282.924515] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1282.925889] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1282.927643] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:23:55 executing program 2: r0 = getpgid(0x0) prlimit64(r0, 0x9, &(0x7f0000000040)={0x7, 0x800c}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname(r1, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) 22:23:55 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x6, 0x80, 0x1f, 0x3d, 0x0, 0x1, 0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd50, 0x2, @perf_bp={&(0x7f0000000440), 0xa}, 0x18000, 0xaa, 0x2, 0x4, 0x7, 0x7, 0x7d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, r0, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7f, 0x1, 0x2, 0xab, 0x0, 0x7, 0x1250, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x304, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x40000, 0x4, 0x400, 0x2, 0x0, 0x80000001, 0x9094, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r1, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r2 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r3 = fork() waitid(0x1, r3, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r2, r3, r4], 0x3, {r0}}, 0x58) [ 1282.989193] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1282.990783] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1282.994369] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1282.996249] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1282.997722] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1283.002266] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1283.003802] Bluetooth: hci1: ACL packet for unknown connection handle 201 22:23:55 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1283.006540] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1283.010514] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:23:55 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = fork() process_vm_readv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/183, 0xb7}], 0x3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/21, 0x15}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r2, 0x4, 0x2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000001100), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000440)={r3, 0x3, r4, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x20}]}) [ 1283.094777] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1283.097523] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1283.099011] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1283.100385] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1283.102304] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1283.171626] audit: type=1326 audit(1752877435.400:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29432 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 22:24:07 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000019140), 0x505000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000019180)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0xfff) r2 = signalfd(r1, &(0x7f0000000080)={[0xdbc]}, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) poll(&(0x7f0000019100)=[{}, {r1, 0x91c4}, {r2, 0x2005}, {r3, 0x8032}], 0x4, 0x40) 22:24:07 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0x0, 0x7ffefffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x8, 0x3, 0x6, 0x1}, {0x0, 0x0, 0x7, 0x5}, {0x6, 0x2, 0x6, 0x7f}, {0x9, 0x9, 0x2, 0x3}, {0xfff, 0x3, 0x40, 0x20}, {0x1, 0x92, 0x87, 0x2}]}) r1 = fork() r2 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) ptrace(0x10, r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f0000002840), &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)={[{@uid={'uid', 0x3d, r4}}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r6]) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r8]) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="1b0f000000000000080027de3e5db09091e2ff69567d9c3aab79acf0c8634a5bf8950a74ba44e7166b562151bb10c3800aa38f6d6a1df48e82233966bdc98884ae4dfa7b6e7d7221892e8fb1faf9b6e146906beaa463c1e9d2f5524174338bc511b46d700b3e73bb7a1ca3fc8b45582ddf03ec021b651e6917267eec7390a6704758495c232dce843e614f696ad443b6e4417ba887334dd31a681b60c9b789c08af944f1a3c21082", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="10000200000000002000040000000000"], 0x64, 0x1) pread64(r0, &(0x7f0000000000)=""/61, 0x3d, 0x6) 22:24:07 executing program 5: r0 = fork() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000100)=""/125, 0x7d}], 0x2, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x150}, 0x40020063) ptrace(0x4207, r1) ptrace(0x4208, r0) 22:24:07 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:07 executing program 2: r0 = gettid() r1 = clone3(&(0x7f00000002c0)={0x55281100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000001600)=""/42, 0x2a}, {&(0x7f0000001640)=""/236, 0xec}, {&(0x7f0000001740)=""/181, 0xb5}], 0x8, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001a80)=""/189, 0xbd}, {&(0x7f0000001b40)=""/144, 0x90}, {&(0x7f0000001c00)=""/53, 0x35}, {&(0x7f0000001c40)=""/91, 0x5b}, {&(0x7f0000001cc0)=""/138, 0x8a}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x6, &(0x7f0000002e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/94, 0x5e}, {&(0x7f0000003000)=""/11, 0xb}, {&(0x7f0000003040)=""/174, 0xae}], 0x3}}], 0x4, 0x40, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003240)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000032c0)=0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000001c0)) r7 = fork() waitid(0x1, r7, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r7, 0xb, r6, 0x0) sched_getaffinity(r7, 0x8, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000003340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x4}}, './file0\x00'}) clone3(&(0x7f0000003380)={0x8000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/44, 0x2c, &(0x7f0000000100)=""/170, &(0x7f0000003300)=[r2, r4, r5, r1, r7], 0x5, {r8}}, 0x58) 22:24:07 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x50003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r0 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r2 = getpgid(r0) rt_tgsigqueueinfo(r0, r2, 0x3, &(0x7f0000000200)={0x3e, 0x2, 0x3c4}) r3 = fork() r4 = getpid() r5 = fork() waitid(0x1, r5, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x7}, &(0x7f00000003c0)=""/192, 0xc0, &(0x7f00000000c0)=""/35, &(0x7f0000000100)=[r4, r1, r3], 0x3}, 0x58) 22:24:07 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1295.803282] bt_err_ratelimited: 10 callbacks suppressed [ 1295.803310] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1295.804527] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1295.807272] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1295.809973] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1295.811458] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1295.813147] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1295.813222] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1295.815290] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1295.816308] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1295.817958] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1295.818305] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1295.819456] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1295.820983] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1295.825951] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1295.827078] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1295.828241] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1295.832411] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1295.835224] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1295.844578] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1295.845704] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:08 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:08 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:08 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1296.101516] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1296.101613] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1296.111427] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1296.114114] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1296.116461] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1296.117690] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1296.121912] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:24:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102388, 0x18ff4, 0xfffffffffffffffe) 22:24:08 executing program 2: sync() r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r1, 0xb, r0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0x3c, 0x20}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3f, 0x7, 0x4, 0x0, 0x0, r1}) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000080)=""/47) [ 1296.226401] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1296.229376] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1296.233756] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1296.237390] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1296.242550] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1296.243848] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1296.246340] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1296.297738] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1296.302754] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1296.307193] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1296.312733] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:08 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:08 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:08 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r0, 0x100}) 22:24:08 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() ptrace(0x8, r0) 22:24:08 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1296.677477] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1296.682879] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1296.686337] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1296.688096] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:08 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000000740)=0xc) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fork() waitid(0x1, r8, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r8, 0xb, r7, 0x0) sched_getaffinity(r8, 0x8, &(0x7f0000000200)) kcmp(r5, r8, 0x4, r4, r0) syz_mount_image$tmpfs(&(0x7f0000002840), &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)={[{@uid={'uid', 0x3d, r6}}]}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000700)=[r10]) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)="e4a009931da312d2d3fe12b8ae852b500d615d5c63451796e7a5a65ce10700f7de08d8a07d6ccbe4e894ad9291bdd77e956f1bd18ff40fac8ced7b454704652d8bdce813930bc66c4f6bef292564fd059d008ef368e3890f6fe87d87ce625c5f73c86cd35ed5120af17508c209d3b8e60d2d143be3b38622c840cba18187193e691a55f0acc3bdc4afec66ca60e74300b232bf903514e28282f58f2990e6529757189fc0c8aa0ca5e7f1d073aece28f8a95354e450acaa992c9039df2aaaa69fa2a1d1f61da30c500c7ebe9297a3e773f8c64b8f99ba0d8937e06b6f09f37b4b74c095ee575d1a840c7c53425bf85e0e5afb0023d2e5f0f2e5bd16b8529e4f", 0xff}, {&(0x7f0000000d80)="cfa9a68c438542dbefdc77b1fa4007220413c2039f3b9d6062ee3be7d7294c37b995618f624f7723be2c6455c156fc3ad49424eafdd329fc1aa8254cb7b11394dda186c26114e3726932b47c89bd67a424ca6b50ff1788906544e6b3e306c3a22d5d76a4b55a8a403d1ecfbdcd65b0cfa718f9939d1b7596cbd919ce913d170745a76441f14fd2955059183b4ed5922d3660cf7ced82b8d51f6fb55b5fdbf1ad8cb6a806257665ac875bb87eac01d43d3519fccde88453e63a339c4e4f98dc2ab7cffac60fed981028154d2c1d134e842790a32198fb65f918b06de091bdc90493cfc4165a9d96a59a10172047e972014125c58b8851e74f50c2e9ff76c75d8b0cdd1125c0ea0acbb8f8abfcfc0c7535d5a85b257f0fad770acb2702f09d512f1cfe5c73bc7f6f44dd4caa90935a73df10a9692dd8e7fcef25564faa43166b9c69f9c3e975ca006d0f86d7ea1aa0c933fd3b21b9aaf300134a4d55ad7c6d5e7037416d7e22d3159b4913c91104f16721fe90a28d3a9cff309c1f25d0b5ac6e896f2584c57886b022295c96f14d26ad32d9d59c73ee7e3d4eda975d7e69d9b17b41ca6c95e93ceea7ff44d3b260fcdb80a1f49a3115945fe33356bd14de20c9401094ee0fd8d9fa5ca9440754345dc5f0659a8280e8d72d63b1a99d666a872da374d45361e648e8ccc37897b0e144ef8995c9e4a698dc9225cf2af769b79f0111c10acfd2317043b8c2fe9012f71f1ab16f5c8abbbeec7b44abe2a3529b9fae472bf34c68758b8d6c0aa26f0e75e8639cbfb5b969fcf45fdbb3e63f25dc071b08ce680684b1e5635032814eadb89e126bc03cdfb4dc5a87162661242690771a98dca3c7643feccef0f0c1ff50ee83906284fa440cb9c033788984fba03a502920b6602005ddb2c0be5d0175e726b1e7421d940f8299a182cbcb4ea94ea261ba8ad35f98fd88d2f0a6818f14e63bd07ed545ad1a6bac72cc53ece5f7b7b9249f09dd17994f8b9fd49c0103148b7a8eef71590a288c2b4d70c535c31398924c640b98cadc74d0bb6d7ebccae5eb3bfdb46404445040e49e1e073b79d4f68bd2f27b3f3dcf091dfd891a8187a9a46a8bdc372abed7b85784577deb5f4de0abd349d2816a2299a857fca359f80fc165ea24d5d7cf15e564db85a61c778201cc3eedf66c84cb1306929af9ecca07870e4e095d2d94f48fd59834b4121c80c47516291e49d1629f9ee726400fd15d213306acf04137c94673ec64d9bc18c3efed3fb3ac61e16d018c290411c434148efbad303aca208df9ecd9a1e614adacb9fe914e503ce07e854c990f9151a238c3ef6c94b7c5f51842f189e53bf4d73c90549941b617b32b3d3ec20d1567b5f6fca920459d9980a4d4ec8ad071bc27d3c937e8175f96ddd0a012db709922ccb460be3f7f3de1353ecbf20d09471519484fc5ed79f62e70d93a7dd2461d4c0f2c34f367529370d96ee49e7ce0bc703f9b87c434ccedcc19ceaf9251e000c1f2b4823d71c4af6d03eb0b71d6baae4df65f7a48938d99aa2b30fb2d4ca7481fb3286445bbc882bf502a64ef99b86924e434be26105fca67fd6625001850f7b3a22f77e390c8997bd48c218b1a2bd223b324f9c0e24ed8e38da03fd201596e7c2b2739d851dc72611a4b6af6eb04b8f80359f09617b6ffa3d1a43fde5029d467625a645710fd0e8c1b945ae0d4b035f376c9c93a0904705b8c59572fbf79d6fdf4282a14e4fcc6b05cc0e5fd713a979a6256314cd241fcfdba858286ac492e73310ef97b1e2a34f3a660694294a63ce7cb1a57c178ca539d7933c69de3b48bd72a00831f43c3bfa348db86ac4926330344c7e559927030aa0a29f9847319e2bf85ca1515b3a526f8f4a5f9fd021716c3d48a46cea27c5d794977bbc6de54777833e29b78fdf791ddfa6c149a4b53e3c2f3aab436373707bf8e5a486278b339f0cd889e4a02488a893fb6bdaa57963c560083da4b2d6249039e6d357888bd84cb327489e3e5b725a7f972041a57a875e6ff2cf378c54748f62d2d52fc90e5f182ff8a683f9f74e49397617ad813043bf1e727d07b802f47dfeeba33420715bf075198fdd0e7f946a824d3cd44939935eec1e3156ac7915da71e5d4c0e0183ffccaef152de7d0c0c1d8bb4725b28925ddb1fea0d8ac96f6715712bad035125f8de208e0ac3562f8f48b6bb2450831fa96213ba551d60f9da72cf861a49ba5f8de8fa4070059e2f0ab04fde158455e5d509934e02fe2c123b03c894b7d56e9b39e2783549864de05d92b7146ac8d0266991c082a788f1f32502b735e9e6e169a0f3ee289d1b89cba8e12e72f9c5433524798c554dd217f014a358ee480f8b58582f0a82c04b10ddd04deea9df0b32360b7b2aadbc1c717e6251d7f4a051c2a0c7290f6372af4048069921921cebb5f90ad6b7beb1799f6adce2f9bd6193290ab7de205f0b60431aaa1b6c0f464d6dd938722b4b59df1ebfddd44963a5cf9d02166015fbbb66473af377f389543813b97b02269f886a947cb0ddc2cb92c285fcfac03684411e88d8fc82aacc0b82b387196fa8eac913c7c78a1ca20deae4c9591c9d8a3ecf3a1a27aa3632b4838c8452f9f03f2b8d43479b2dc536d264c2cd835806188cca20286106e16432d74c7caa8305fdcff7c151a07dd7c57eb24e7c5bfd939144a1eb4bb0966ede3ee2330d146ce4bad3812f8cb975b20a28f76cde25f5a943a16a01783de8094951ec4b26a21b2cb9505163c86d561ac5aa70bd5faaaf3e5dc625b914035b5cbdec8eeba4a662bbd3c39aaae6480795f369f4959fefead85e5508b3c229f31b98b768b82a6660b761faab39c38d1e4889a188ce0bf2a56be6b42f3e974466d6464d7efc7713e9158d097481ae8f3021a54585e51e043c7a8d8edf27de790f483e3da4a5c6c1eee2e706ffc24dcfb7eb3cdd0e1297738e6b07a6bab00d0e70afef70527e7dff47de81a0a996cb78cec9947fc2850f831ea8e292090a4f53b8b979a82d8c542b5f78f1261794909077780d113528727488a39407924df1e0e93393eace356d25be114ee76202e5262265f4f8879c929afd66242ad9205f976ac59020ac4c52b32f88f8459f9713b441b09e01275ae65f84936203d79f4326000e2f2f7240e4c83b70c0044e16ad39051292a7d37054449950e370df23758e2a3608ec2e37cbc368762dab281fa3d6cd4b09e1c6f41182956a3a2246bb1693da0cf268acba05166dcf18a3d1a0bcf9953ecbe79e419c3f3cf87800b8b5c9b52952b3c2313bdf28daf3383e087e91ba5b0905a0d0cdaf7da00e41f26643dcf7ea24fb832b7cecd0e5b9b66086d86febe2b913943ff08094605dd93d07f0d0bff0c252e9b7d53f8a8644486afc9e8600317a850c6ab3884feb96fc32449f6c8c1221441893e9b08be4318d5d1a5a147cfd8b417dce988e89c3484f1d227c298f5c551a78840cef8c8b3d91b16d20bb8d5da097f4e27acfaaba4715c266c8f91a96a5e2754da3046a65816359c42840c1fdc68ce17eef9ce15ccdb462ef99c743a8e35074dae084c1295323659f6cddeb41345eff590d5dc06dab1898ada15d8cdf179df62cec962caf4fbb8b850e296dada0b662260b65b555cb963e5de5a31856522a5ad243e7fefa0fbc12ab9ffdd14b1cbba757d02ac901394941f2caa885d6f3c06e59fa3310350109ed2c2ad1fa4074c58352376e913bcc6ee59f1d1dd6c129079291b70369a9ed664dbeb57f01e09507d8ced5da7b0514d32791db1795486fb829b131747631d39cfcf5916f24774fff532b2b5c3ef6ebd7480e2868842cedfb94fc4c97d66844e9f8b4edf5f859f1d4dcfd948f0d356dcf9bbbbd747447d748c58137a52f22ac6d2c56f6587092a3b7189dbf188d0df989f5a7b60929f590b05b16eb155af3abb41664d4bfeaa99cdcd8116d7b81274d7efd85ff0448b0d1550a4babc18c4965f1b730c1559e3c7e18c450124c1bc01152932bc934297bddd029a30ad4a02516cfe4550a1fa92ae9f9feca2788814fde809b36212e27075309eadf2294923f2fe5726196a176d1e0d487636a7dc87b70244fa842bdab0732dc713e574edc61537040865b17b2148d10a6d32df63f6221ee1f02886ba95393573913adfeb56f3d53dca52396739f4e1088f761af148573c6033fd1895a4872d22bcf17fb42f8ad4c5d217d134a3e3f823b847ce0f7334182f0e885ace5baabdb8cb23c1e16527dd7cc3a42bda5efcce3b378098690c51fdeb2ccc3826b91d7bb4a014e4bfcbe9b56a44fbb3207b5370e7ff3a475d8a342c9d7938e641c40c31461e400fa06beb9feec1d408c61e848c637841b567cd45e28578029dbeb431ff36668547cb19d236b17bc6b8a31f007be4e183fec316dda78bf7e1c4ec78d7b5ed4de4ee8b1d472431f08130c6f5c655363f83ce3013e57c79213be22818d6fd60073f9972c1837fbaa5dd1af6b4cbe94027da30ca3a7f792ce262a736e053fe7e3e9bb2cf14f1e3499be0059b6c50f3baf0a3d76ffeeb87f45a64ea96c665fbc69832b71e4168e60f22d10ccc9ce0df624623ea8360f6793eb7b3e53d57445d113f288e689e59a8f40a668878d7bc283a9628db8242a25a469a752d80615a7f694e4ed80b764621bd3433ce7faba912be6765e8c41e896e364ccb7405ef4b1cb0acb8a7bdd1d8d3b7ec48886bd0e15a012f5740e2f738e55baaa92b4d338310d476f2a4a7928428b7f4dd9996e8efb38912580e18aaa261912cdc59580c2a163d5392e9adfdc22f1dd943e06f86469536f4159cf10ff536fc81f0c5bbd41b2709e0fb9c82d672f0ff753685c5fffa6342613c014573d6aca277392fb2a481ce7370d514332b977dbe7d846d39e57ff3db10a723c7bcfcfba6abbec286009cffa1ad29ed0b62ed42be0dc47c47a4c3be61fd300f3ed553add0834ebbcd3fbaa7f347cb01a098a80a81a4793f0686285eba441e8c848abd3ba92c81112da20d2fb9756604227617d014a8d3dc57754252fedf69401062a2a665ba5cc962f6c8dbcfbfe71a185ef34f405e2e0027f9e76ec5087ab81ae1e9f7e2403716e4169e9a1524e148a60ad4b5a8ffc6837a3a01be58651f5bb109806f45842cf442b454a4639df707d9f2501ca68ce00cc4ab7d020567aae063e22a6f9846cf95b46bb79cb38703b608ec9fe3f8d09ab6e440608e9f5ba65359d8b8f8690212f54a07ef20c9c7a9071b27ba8818692fec4eb32076a0077fa82b10c32365a03270e611ab5d31cfff32410ee13efc27ec75c85c65c32f257b6a00e0ef6673e9effc951e9223c5a196a2c0c2450e53bdae456089290adfcd78954c2011c4ece44bb02f6a74a68d55f6dda1867df6d789221c7d7e95b8206d5cd5f31e0e0c3a89836a92cd7108eb318687818948a1d936b7296643d63b21e39a6a8b0ec821f6f4336b577c46f89ded86e356649aee0248d8affe903ed9203df0638b58552b401e1d56e4c4a96b0ca73d2ad1f72b4da37942acaffbc7031bc986bb26535096597200e5ec1fb83dbebe1f58b24cb5e24be0df3b7695b5b8bc0ac7e6bd31c1eb8e920be7fa776134f591f04df5ddf170fd469bb9de39bb684321d5b1b1cd894bb4e4c277e868c95dca32e11d95fd4fd10cb980a1f72cb6e251576cf0324635edc0ecfda859d3737fb42ab20e3073e1eeebaa7fb5ec8f81e484f1a2ec26a76ee7858ced60e9f247ac8bb4e1bbb0d39dd032714185a5af5e5fb73489be8aae7214a2865bb82d1a7e37655a4a5848e060bc1a0f05db1f667", 0x1000}, {&(0x7f0000000540)="b30c55ce537293517e2846920fbd972ece54b03230949c6703349e18fcaf14cac7a1b6e13a0340a8369f651fbcff84e963222e9a32879c413fa74cc2727a84a75e75d8d74ad80f80042a5a378d786b2f2d39f1a29a2a0e4877238efd37e8d3629762", 0x62}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f00000005c0)="62dce3b0254d20e48218731a905101590d294e83349644d26080855d86ea0b53ef64470cc45b7caf0c5c5f8d56d17f5bb4418993806646625c163c9515b86f4598851489bd213e5a1266415296c1772ba5cf9a1376f73f2e660c41b916f09e76f2133f5d35ae5c24db59189fd576c6e2b81dec2f206a6c03916c", 0x7a}], 0x5, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r10}}}], 0x20, 0x800}, 0x4000010) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) [ 1296.731668] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1296.733296] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1296.734565] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1296.735792] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1296.737424] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:24:08 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1296.770574] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1296.773440] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1296.777406] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1296.795388] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1296.799042] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1296.967804] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1296.969279] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1296.970896] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1296.972041] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:19 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x97, 0x7fff0000}]}) fork() r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4e, 0x80000}) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, 0x0, 0x4, 0x70bd29, 0x0, {{}, {@void, @val={0x0, 0x99, {0x9, 0x39}}}}, [@NL80211_ATTR_STATUS_CODE={0x0, 0x48, 0x74}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000001100), 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x48011) 22:24:19 executing program 2: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x15, 0x0, 0x0, "7122852dcbe287a9911e9aad3e8cfc92"}, 0x15, 0x0) 22:24:19 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:24:19 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:20 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:24:20 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() ptrace(0x10, r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000001060101000000000000c73148b081b100000c000000050001000700000005000100070000000500010007000000050001000700000005000100070000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20008090) writev(r2, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000001100), 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000001100), 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fsetxattr$security_ima(r4, &(0x7f0000000380), &(0x7f00000003c0)=@sha1={0x1, "7ba192e1e665ec25721bc7f8fd6095f8ea70f1df"}, 0x15, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) close_range(r3, r0, 0x2) fcntl$setstatus(r2, 0x4, 0x2000) clone3(&(0x7f0000000300)={0x100000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0xa}, &(0x7f0000000140)=""/236, 0xec, &(0x7f0000000240)=""/80, &(0x7f00000002c0), 0x0, {r2}}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x5, &(0x7f0000000480)=[{0x2, 0x9, 0x9, 0x10000}, {0x9, 0x8, 0x7f, 0xffff}, {0xff, 0x81, 0x1, 0x5}, {0x4, 0x1, 0x80, 0x10000}, {0x7f, 0xff, 0x80, 0x5}]}) 22:24:20 executing program 4: prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:24:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0034e805d6786a00000000006326612369cb433c47fe88a3c3015734652f04b31a85b03497dbecf1b4dc8bbc0753bcaf6ddd891cd77f8afc8717d52520a696057822bc2c6fca8d4a1dd2b29118a358d83eff28e3303ab4b01f4d182050fc4b5ac35548eeb6177a0ad060a45e63f2ed114f66e9423e4634912c9382ea2353f99d9443b77e2c68d29bb1b5780479681c9ae373d6c77a042cfeb42f9e1a765f6bdb55de0f45abf0a17ba3c84d89f4e490d18e02b04e3be0fda5f85243db61d88b6b6c4c0abad6ba45c2eb1e2e9a3ab992883626e00000000000"]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x100, 0x2, 0x2, 0x1ff, 0x69, "659f7e443a8e026476742ad659ddba5626de4b", 0xffffff01, 0x32fa}) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x9) [ 1307.871798] bt_err_ratelimited: 10 callbacks suppressed [ 1307.872348] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1307.876685] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1307.879164] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1307.880371] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1307.880416] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1307.880629] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1307.881688] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1307.884961] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1307.886629] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1307.887792] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1307.888734] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1307.889244] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1307.891448] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1307.892497] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1307.893325] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1307.896267] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1307.896742] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1307.900625] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1307.903479] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1307.906669] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:24:20 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r1, 0x40}) fork() 22:24:20 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x7fff, 0x80000}) r2 = fork() ptrace(0x10, r2) 22:24:20 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1308.015025] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1308.059269] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 22:24:20 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:20 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:24:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102393, 0x18ff9, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r2, 0xb, r1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000019100)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r4, &(0x7f0000000140)=""/183, 0xb7, 0x0) waitid(0x0, r3, &(0x7f0000019140), 0x8, 0x0) fcntl$setown(r0, 0x8, r2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x7ff}, 0x8) [ 1308.192920] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1308.193023] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1308.196967] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1308.198765] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1308.200374] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1308.201136] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1308.201747] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1308.232503] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1308.237846] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1308.241546] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1308.243146] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1308.243769] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1308.248551] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1308.251312] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1308.292300] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1308.293178] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1308.295115] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1308.296400] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:34 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:34 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:24:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000019100)=""/102400, 0x19000, 0x0) ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000000)={0xe5, 0x80, 0x20, 0x6, 0x9, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x5, 0x7, 0x0, 'queue0\x00', 0x1ff}) 22:24:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x802, 0x5, 0x5, 0x7ff}]}) r0 = fork() ptrace(0x10, r0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x10000029, 0xb6a, 0x2, 0x8, 0x40, 0x3, 0x8000, 0x8}, 0x0) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 22:24:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) fork() 22:24:34 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:24:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x61020900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8e) 22:24:34 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1322.098601] bt_err_ratelimited: 2 callbacks suppressed [ 1322.098630] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1322.099888] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1322.103002] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1322.105929] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1322.107531] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1322.109033] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1322.110490] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:24:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000019100)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000019340)=0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f0000002840), &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)={[{@uid={'uid', 0x3d, r5}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x34, &(0x7f0000019240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@access_user}, {@afid={'afid', 0x3d, 0x7}}], [{@subj_user={'subj_user', 0x3d, '\'\x0e%]'}}, {@fowner_lt={'fowner<', r5}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_user={'subj_user', 0x3d, '^['}}, {@fsname={'fsname', 0x3d, '/proc/tty/drivers\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/proc/tty/drivers\x00'}}]}}) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1322.165365] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1322.166277] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1322.167873] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1322.168689] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1322.171386] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.171517] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1322.174058] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.183389] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1322.197478] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1322.198493] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1322.199757] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1322.201675] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1322.206675] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:24:34 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:34 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1322.333712] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1322.334397] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1322.335523] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1322.338426] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.341118] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.341742] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:34 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:34 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1322.402699] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1322.403108] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1322.404723] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1322.406524] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.408712] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.410037] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1322.418463] tmpfs: Invalid uid '0x00000000ffffffff' 22:24:34 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:24:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x61020900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8e) [ 1322.475060] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1322.476229] tmpfs: Invalid uid '0x00000000ffffffff' [ 1322.477075] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.478539] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.487198] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:24:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() ptrace(0x10, r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x1f, 0x80, 0xf9, 0x0, 0xe21, 0x10000, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x3000, 0xeaf8, 0x134, 0x0, 0x7, 0x5, 0x6, 0x0, 0x8, 0x0, 0x9}, r0, 0x10, 0xffffffffffffffff, 0xb) 22:24:34 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7f, 0x0, 0x2}]}) fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={0x0, 0x2ca344157b421a57, r1, 0x8, 0x80000}) timer_create(0x7, &(0x7f0000000300)={0x0, 0x6, 0x2, @thr={&(0x7f0000000180)="6fdd464d45212c5c7ec180a5a92aa2172d36a42813034993c96f3778d50cad7816f0ab6d5648ba44808687174ce0b307789dff017b8cabad06a47aa40548dd7e61efa87a642137f5f9fa18031ebbed4c6e173ea7c0cc1b63a7e9167e7307f68cd2c207396daf42769748a5d472e5cc01cd1f5de314a0fa7b3d5c3997e1be317942fc8c876d073d39cf0da445b8861b86a6f7ce6bd9108433a48a5aaa561d239d3b9195e4d428f74a66397a8673222974b1d4fb77e21ebdfd955a27ea65e1988c5b0f0132bcdaf47d3f2a66c83d7c712f6088b9b5", &(0x7f0000000280)="1b3dc267c0a555b2d1df81f29563abc0b0c00f5a23e31c7ccdf5906473036fb0b97d7c6d0b62df2682d1fec21b13b6e41d27489c57d861cb4c0d2d300a0abba0676973c79c5446197ef69bcc024c39e996dc8769de062d1060b495c5692ce00a5aece4424e939d19465e055a41c1bce9488d88ea95f973c1fed5b2"}}, &(0x7f0000000100)) [ 1322.510613] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1322.511378] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1322.512718] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1322.523127] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1322.523710] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:24:34 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:24:34 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) [ 1322.550753] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1322.551691] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1322.553262] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1322.554325] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1322.556036] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:24:34 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7f}, @l2cap_cid_signaling={{0x7b}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4c}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x84) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1322.629092] audit: type=1326 audit(1752877474.858:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31483 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 [ 1322.707999] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1322.708790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.715720] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1322.716595] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1322.731529] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1322.732291] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1322.733085] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1322.735648] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1322.736460] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1323.462538] audit: type=1326 audit(1752877475.692:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31483 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 22:24:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000019100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000019140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x585002, 0x0) pread64(r2, &(0x7f0000000100)=""/102400, 0x19000, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 22:24:49 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x800) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) kcmp(r1, r1, 0x2, r0, r2) gettid() 22:24:49 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001cc0)={0x144004100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, &(0x7f00000008c0)=""/246, &(0x7f0000000ac0)=[0x0], 0x1}, 0x58) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/243, 0xf3}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/55, 0x37}, {&(0x7f0000001240)=""/57, 0x39}], 0x6, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xb8}, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r4]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000001100), 0x4) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fork() waitid(0x1, r8, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r8, 0xb, r7, 0x0) sched_getaffinity(r8, 0x8, &(0x7f0000000200)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f0000002840), &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)={[{@uid={'uid', 0x3d, r10}}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)=[{&(0x7f0000000240)={0x218, 0x2b, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1a9, 0x71, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @uid}, @generic="1a124da2463d430c6e7bf2fafc898f17a7907385d04cb3fd25a1e4029bd5346f83b37cdea42fe56a54987554a840cd5fbdb24269a4c6774a77ed5a4040afb55fb79cb44e088e8814ada40f821f5376e45b9697ed48b63e5682b22022c006b9a368f583c5e06cee7d2d354ad57e610af8d7039aac09727d73fa0a7e922ca006428ae7a9f866e64cbe147d1c8a32ee099fdfc4bb665c3a4c", @typed={0x8, 0x39, 0x0, 0x0, @uid}, @generic="a3c2c64d6933e37f3397baa9d0ffe88284b4f4a27fd6e0838b6b5f96bf9f2daf19", @typed={0xc, 0x29, 0x0, 0x0, @u64=0x1f}, @generic="7ed61064e48c935ace05f866207397983522eb30c29c6642027325058f858e96af10bdda4eab800e3955df4b49b06818a5a81f614d8b38a6ed2b0bba6fdefc7934dd848c2852323d7cd3da68d6f658407dbb50d6a1a32f2a62868f4adce1dda35e5800819dcd8a00145dfcfc41eb7f6e588ad46e70f95871d66af1ef2cf63cfa129823c44b665b2bfb2535a21c0584cb4bbcfad4eb6926cc2a3296bbcfbff065caece10e5c300c91f87d2e03a1b268b1a2c3ef2120bc055a988d88e31a52bdcbd3ae76e4a3f163509ed14831cace721292"]}, @generic="2eb37bfef4e1c6e000601016855a40c28e8da5eeb9fdf426661c69e928bca7c27dfa59904717a29dc48bf1afaf530963d4cd6cd5fc1d8905f34deb680effa0f1e08abdeb32f78254bd67fbdc1cbdba1bc4c8ff114382edb4", @typed={0x4, 0x1b}]}, 0x218}, {&(0x7f0000001d40)={0x124c, 0x2a, 0x8, 0x70bd25, 0x25dfdbfb, "", [@typed={0x41, 0x4b, 0x0, 0x0, @binary="d0b3b65f9dd4f827d1c65434d5393101b3e1ab770f49e331bcb264f94f606bf6e100ed128162b1c789ae10bdc5a84e0131606aa9e81ffba9b4b0b51192"}, @nested={0x11db, 0x35, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @generic="30a3db58d17ce81e7b079b740a2a302904c5b2690a41393db58faedf000f1b2354172aba38ac52018e8dd0527ed30a2003ed6d6295d030d662f65a0db3da7e674446d9b1879a3854027dffd811993ac4574d8157d0f44024f1afd48f4e7c727ebbcef33119ab60aef844ec87a0e62e73d7678a1aac4a84c637246d8ab7984ec4c0da5d204e224fa67a24bc595994a038a36cf546", @generic="234b97afe9bc89ad3fb3709fa8079d1d823face40ca37849fdd226fa3f44d9bcef22638ed6e2842f8380ba3f3b08c1f6c1c0b2fcd665d2c646db9911e30c0ba881605e2bfc66329ce517da8b7e", @generic="7fdf773b2770018bb3367a6a74ed2ad4cb2adbdcc20fdd96009bf49d8519445476b5375e14810e25e18e8914b2c3c36b1514b702ad0c2eee7c8f60f1ae8f3fe456423a5bfa9cfae4068c7ae455eccf6822c17ef29b3f5fe26650107f65e0c4d4d189cba7fdd0a2fb9e234aa1723f0f7d53a7c049d386877ddeb5bb9d1f2818260af363c2677c3b87b42a14fda7ac189f4275d9444d98b66c89b499f618c09b0481bb5d8b89f4a1c00b6b83585879de6a664818e9484b0944f3420740c3b368b16aac508bfcd52497acdfa4502965f3d01405", @typed={0x8, 0x19, 0x0, 0x0, @pid=r1}, @typed={0xc, 0x23, 0x0, 0x0, @u64=0x7fff}, @generic="3bcfa6a466708caaa25fcb44a345c159792af1dd30346606e8cbb6f7c840ab374b6a734a1e2b4dc7a8c452ada31744b3d0329da77e3190549e5ae6f410797b5d864c846a159fd544cdc6dc41b0bdcaf397ca9191511938270351ecef0bafae8d2e479de17ededc18665b2635cfb0a22d4b03c1ccc6bd158e8cc144c2e1b442362c41ffa373ef282df95b423453fdb7b181a46824a7616255dc9aa243c376975edbcb55ce3653ff192ed0452cc220a2d6707621fc8ce9f0726677156a3e64730805524535dff2b2336ce448f0fae186cd9c40c35e11b7f48da21a80dfd97948a3537bd3d66ad5c6a1c958f21b0b3336f36c6f4208970dc21c54634a62f23ce7ffa64e7f2129d5c0440f8a75cd3f7bfa0f43a8c5ed371bbdaff5390eb4012df3010de9c99ae4cd51e84694afc39b418aa8097164b38ff7e73cea0b53298f2846c7348a71d8b03f2852145056bd59e33fc1391f5e6777214757a42cf1d8a7e35ab00b71560f968cecb8067a8c135f0d3b61c4a8b112cea8b2a7434238e845ad46a3c93fa047e50b118c44c31f5844f0d924c5b556b167365a3d42b05ef04181ec3441e19516b4e645b89816f59cdfbe5a9eea56afaabb05bc22dbadc3e06b2103092780f586dc50bec1fb321f133be160112c50f3b774ee7005db2c2e1b77825e648357dde38629defe8005dce85c1500fcce67797a8382750916a29c3fb3c29fbfa706655bc8331144d7b1eed45693fdf26a29a6d79a0840278d2774bd1848bfed514ae988a1a0cc285b46c50a8a25c5a0e1b239f3ffd79d65eedafffbcb1ad69260f75b27f2e5142619c146f7c2ca0dbae9356524494ed48e0a88373d1730827b91dfc4c4d803cbeab66f71951e693dd3dbfd4e8644fc93d483bd7255530a4486cc37f3d03d1c705b6c96efdcff896116d566e71f78765fafe62bb730d1bf4e607049206b503c7b28031ef20fae0b7583fed373e72fec0e490a8406014b8d4b89e588382e89971e227e01e293910d4e4e0ce94cbc43f2df4a8340f401c87d188d532bf367a69c1c69611d6181182f33e008eb7b8545e97fba9822489f5ef373dcc82436afce829ca3d95cce5e6056990f36c903f144b8a578bced1c2d38c99c0344af5e85ca4d3bac0bd5186e9e9e165b2d15a8fa3f952d6e42dc269e84d2c9181bb488a4c8c57966bde0f50a2e020e4301a3fff335b502688963233833a9cab30869578efa0992e4197f5677b8113fc52456cdfcdf96b3c123c52472c3116a4abca497335495e5d96933810d96deb34ef730eb83c824585a67bfbf7f04465195a1473e975ea0c874003de811131181877fcfb1978c98942055f5f79af208bc81f454e209731ba514c39697650e87ee0f32979a07d73c3f6264b6ea2840d7b1178ead3032c8557e230ea29938f1a2a1dd42a9dd5a9e01da5e1abf0ea203046374c19d012f6b8ba117d18ebf285db9925e3378cef2b58aa478509d3d3a80635fc08f2c4fe041027aa1aadb01570e99dbc9533867d3743a5216d939f08ff0fd0399b20bf92f241d94ae741fc482b484cf9780942e0b273ecf8f095a1fa9cccdc1b64a66fec82646f9da1a78377acc319c34ddae40f1963a301f0b8d3c6ec077ff90100dde6e9cabbe0f08e9d0ae9888b14cfdf698970af2fbd3b3682e4d286d7013455358dd69dd4a711caeb6814a11003bcb066c88e5332ed2fd377b0041968c12664493899b58834b90c68b15032fdc977f43db270606ef29d236eceb70530dba472568d8234797acf95493eab1a1ee867e75cca9a82704644ec6d36bf83f02122662142e971a2ade7d0ccebcae798761483585311c79d4ab9bd78f0ab5a94277e76ba65789d3ac22793330ce47cfb16baadce993d2204dfde19fddcad526262ef547a00e7090a4b4343abb09be24dd0b842e903e18a3d82dd1bcbf2376286197bbb644fd8ec3e1a8ecd8b97fff65ddf87f4d584380ccbfb5c836a570446934e0e43c340b3ed2e73cf423fbdb0dd6d32da6b8081e04ca1a01ec2e88548161a0cd00869a615d8458b8b3a9735d4f37b071b645478d926b45d4d43fe7ea2b14c508a4229467917717475253ae3312815cb1683440731f4e1aa710b5394e266e7a983c17772fbcebe0585c534383c924a205eb32a930fc7ba1ff6bb8d3973003378fcdbd0c2b4a719c05a237d8e77c79c681e1d7faa1c72c3a7fd374a6c1c46afb7cb62b3ef84dc18e9842333d9e91a4b9750f82727e94c93611d9645b70a5f9e64019db0fb1e850445ca07ad8cf6c770469d8d2a13f0f4aefbe7343ddbf0e21999fa9865efccababba9bb90e41ddd0987940f8aa8f987333b3245291239e25f266d25ce2d9946fb6d6a91ca8eb4091f3388194c0fa84691e9c076e5b3ecd9106f86399fe82d3c98798e21b0b13cd950f920612f92c19f2c136213d252402b11edfad8b50d6dd48c46604c0cb9b41bc849a2b7e5142ba1c29723d58fc26eab11116cbe47a3dd1fde5e2290e164d1d6d8ba778fd4af8221b7be93c18ba06cf03938e859430f120e47ecbdad223a1da9303e02953a45f25e7944993c1d38197d098b2dc6756195f94a77cb465e8aaaf0a1027bc0925244ff3dea61ce2f1faef19f5f019a775a95c52b752f656c4e0d12947f65b5e584b8d9edb5922273e5d00f6e8a2acced00395939286ccb42ff8b399683e1d42eb87b769e6557814b9b9ac620816effb6e232cd3455b56576f75a0894cbd14a0e62ffba93f84e0a6f9464db304e28cfb95a8039ea451efa31ef7111b61cf4b4c9de00d114c64b4ae0d428643ae7b5d7a62c208580d5003acc5252a508096c4830f88e3a93410f96f27cfd1d4fa92ddeecf052fe89fe8c47d06bd0457e3fb825c766a7a839e04a511835e53276a5bafd2a350c067a70723c34e8f0a3a1abef2da0d0a27e531cc1fd950c66316e39e3242aa1d76a76c196eceb514a9bdabaf46206e981e413f188807fadb0186a393e9338c20e30df9547b512b2e8d293a44b3343a85710672be1e838037e1149234d22c210cf2975f258cafb5b6249d6f06c02c68ec76594b9fce07103c4f634133a0c1227053d0536a88bbee92c3f809590f1723576fc03452f19c0e79d53efd4e4ac59c04a50feef99c9e23e00dbdf9926fb71f869ca28a9b961d8f1fe93aa56c57b13c6a8ba8cbe81dc2ffdb131ebcef73f809fb453c1b21b294c0635b1cc752f3b75c93e89a7fed3d925a6861d50d8c27aee9437e4e7497472fabd44e0b50478570ef4a24021c701fb02550e352c9707ea8fecd5391adc84458f741301919c83a43b0ea42ec4b469cdb749272e7a11f1c83856439901999626af5afc5cad47793c05e4085f42358169e4518389d3e1c91342bae4c6ee7357d2567ea3220a7cfd8e4356b69ffd25d9032355adaf4f4cb98767b46f486e0f2f760215d86bd503b6e1635c8812dd5f005b6a1cf365f9b0d4cd5f572742276604d7aa6cdbcc9e8130084c07faa27233ab9c67cef932d3548ac931129a380590120dafb34d6f650a6613fbaa52a3f39474fb60632a94178c2af4348e3c4620e43fcd77cac4d2b35aceae22b36ce8a977189121a60fca7c9dbf3e9d7584d282f608436e8981b76b79a77cd46ecd212a0544a6616ccefbfda9b942350fc5b7066d12e2cf2bb9491de16fad16b071560e1a165197e21a1c0bfde5b39dca483870d44a5b4ab56677d7a8efddb98b54cc988de067917f9f7a9b656d40a2ac8c42408d869a9fca83fa2e8edff3494ec05e3761b08cba462245cefaaa9e5fe6d40abbbe236e0f89871be93370e3283e1fe50905fb1ac74cb0b326ca66bdcae4409b0366e080081b345e9f37430c8f6d8707d86f1b1689933f6f71e9b574b0a31862ce531be3a0e6df435520774cda003b102a5d5a0d6811fc235fd10c2ca1c310e65def75e6ff255a5ea752993d1c39cb417dc86ffdb6a4094467434b41e399af702ed991d878bffaff9f614a19fee8c682c21cbfeb816e656150917418753e39f5cbe4671c975f007951c325cc08dec95175874942e0815da5181521ef4ccb04330829446357cd94e7923a395b7ddb54f03644ad7002d1d2b74f9a22de72f0703c160d00da24d560547f14bc7b3445ecad0a428889efae00af9135786fdf1e87da3bbba63f00ce47b3e2519ee5ac041499be248cdab737b8022cdbfba93a6bd8207f9f2bab75c3a95dfa9f066ba1d34483d184cfc5d18ba4073f684a85c67334767a2f4171952cb64aeb6e78f9ca66431687a7563e394d962f8f0fa8de014a49aa1f59d45d22417cd22716b370882ad5ee455e4ae002f28a530f7b1ff894437cf3a7829f196a9170a8c6974b9849de3b21a3da75f9a772f1cd54292b7c2b9920cb13d4296f9ecfddcb6bb7a570c3c7e12c8a3fdfc880c1f417057bb7595b4425ea35b554c00da4531000e7c443a2b9b4adaa21bb650a679711855178d6d001add7e63f871cf984883e31f717f74c40119a425ab36147f3d05dfe3856f28af9fcf21a1c2458b4a8f71d9100e28f1f517496f5520c3e221bea52b1c7053bb0f53d846d0880d78f1eaf90ab1cb9b4348e3870ae6007bd2a153e44c267dfa9182d158510581e6e8f5586d3951f5c94d487d26bd72abcfbb7b8728444950dd7df9e70fed5aa1666c8c1687f6200f3d01d203052af1b749ba9d3f4a29c8dd37e55c9c5d95426de53fb37502a8b5287af651c4a5462c39929aca901e1917b0bfb3b62400a74bfbd15df86b647edcb76057d67a94b296ee291809bf33d9c78e34734d3ae3f1bff26deeddb209b6a9eb9d3932686a2b3a4b30b6416e9bb534c28a7dd5229e3873bfa332404663672cf6b77bf97846ff3a62a088a5ee5d9d0a50f8c358636dd7ea9774bc1476d222024055ed0544b727a635f04da124e0f33b2f02f5a23847dbf39b5630bb6027c8cea22821705e573c81b7982a862d6ff2acdfb2ba5a4ca4e7eae3a2c938a6abd597fe313ee04db20c799e20d1c8f0517080e8e3bb25c620d267e6abccaff6b54d5e27bbadcf4372e236285cd9e80c3955a5da92d3cf641aff2dbc6e95e5230ef42a3f974529a4c975d23ebb0dea03f9092d6d84e229a92c584a3352e5663f3ec500975d5627e78c8b1cbfef76275b5465695a97750c611c8a4fdcb05d3fd6d1a5350e96c7109c2f49d66df29d1782f2f178a964e160f1a2e2553be1d9dd5beaf529fe471861973ccbdfc34a1a616d1ba5f9d4b9610df6298441d15c8d8682a51907516d35417b2c01c5e71f80db55f729dd87d60a3f63e8028cf246ca92e224ef7f7f692e80ed12e9e7b9ec0cba3c787ce05c1f384c5dcccb25037720631a107f641c5486cb73f0da93210821f64e768f5af726d0deaf7f63cebf197b614ad9618eb9dad8c26f2576032bc8cd8b4511d1bdb1e2baf1979a437a33915ec4d116eb21412debc7567f00ffa99f0fe9c97f357214c11a2671f5df07c927a066573d5b0ee6aacd5f5056aef409fece6c8e737815ee15474d27d4e72c732c6b8cbf517464966c7988019c1e3199875d8c7a00aa826ce3f3537e2161a7cb9db6022a2ba829f39fc6a61647cf1be7c6bc79eb7502b5e9b1fd3c623e88b7a1114275c5dbf85d5a3c9feb92b8c0627ae9663cba6c7c974bd4aa70356cec0433d5fd42d51c91157ab10872998f225dbdb898392e9769a1f9fd3e411f1586a98aec3c432d93a57397c808a0935d073dd59c2d1ec0a71ad06cefacea394beb6217dd2c98d86088cfb0e42c2585d725a9cf0cba90524e149081af7d110a4b2901696c843da30de083d5d", @typed={0x8, 0x90, 0x0, 0x0, @fd=r0}]}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0x3f, 0x0, 0x0, @pid}, @typed={0x5, 0x93, 0x0, 0x0, @str='\x00'}]}, 0x124c}, {&(0x7f0000000540)=ANY=[@ANYBLOB="e0020000350000012abd7000fddbdf251301538008006000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14002b00fe80000000000000000000000000003400a3882694e3bacf959978e3173f85db4709d6c4b3f04375ca76030874e562cb441fdb2879104f82419f37075369792e3f921dfd17f8ff0c7c1012ec6db30e1208001d00", @ANYRES32=0x0, @ANYBLOB="47ad9b426819870ce0afb8b23c534944db"], 0x2e0}, {&(0x7f0000000b00)={0x2b4, 0x39, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="e12b24e5a77cff4f0f2aa1fe8489f4f2407e9c3f1855c341c3c4b9508d802034e14c12722d", @nested={0xad, 0x37, 0x0, 0x1, [@generic="a3aa8274ec9747273de2e1d3357a581ce68b8f47cfb97325fdd66944ed73ea2471230440e6cfa8a158339689af3428e68b26", @generic="195bd8bbd92edc19141728570f3d340820875c40172b7d31e1e562118590", @generic="1880e02bbcab911075982a11ca34c5a6e92dca71ed4de8837b3136550dcd5f62135d7b0c6c33ed8c6d310539f5d5a772b833a5a7e8f3cd4cdaa51050aaa819768a7442a7e9a72aa0c632f08140", @typed={0xc, 0x93, 0x0, 0x0, @u64=0xa49}]}, @generic="db337276b060548c2091cefe398ea46c82c64b0dc50234118e08ace2ca48ff4ab401bbdb064b6be9dd0ce1de3b3163b55fded5b1d6ca0c2c26b54a5618b644bbad1c00cfde4d69ca8668f20eeb9b89202eefc1080f188740d7956e5034996de90880f6ae37d8b8db3908171b0c276170", @generic="02e5d7014d43d5192ca073d586c9d356c6ef42503c9fad73252ea9cf829bf15764c64dea1c21616fcf287a2200c91f207b2abce1692a3ebe5ce5b1db6bb8b8aaea1dd02815fd0274d611250e6acf2c2bf431b5e49c17b41371f9e8e1afabd676b30114c0088b6f2056cf722b8330fda3108d9553c6741e1d7efe5aa4732dc606c940433f0381ac597b87ab1c39a41fb85356cb530ab4fa93365ff5716aecb3aa282ed6cc981a0085301548e17906eb993558f8da3e4edb19f48f658a68633b0e9c8bbefea73c2650bc9855", @typed={0x8, 0x96, 0x0, 0x0, @fd}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x200}, @generic="720edd5c1fc3c7f6842332a94cf1551f9d3b5fe7b6227bf5c62d5ccac1b41165d6c33cc9bf9920e697193b076d61cf75411b897b5332683f2a5faaa81ffca476d48bcb43beb60186b7ea50edd12c38afa9b6e99c492b84faf2f9a0f72c15079c81f639cabcaed1f4e38f80"]}, 0x2b4}, {&(0x7f0000000dc0)={0x2dc, 0x3d, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @generic="d77a29a95d76aaf4f025176bc071a78d1283660f9ded9c7e6423da64f9596833cca11318a713c405ffdef5d6b17a1a46b0a7943281f65c29e1fcce41acc54fa0dd1af6372ad4790085b1451fdb570b063359ee29f4865368ff52dac80134b0ac7cdf7217ac7012aba9545703dad4077fb33fdba5aba12c9733549b0fdee93fc1cb4e85e3103a65e47d61d05c935d425280c6d409c92b9125c0c178c9", @generic="5638025560e904fc75ac9dea3ad34b51d3fa542093f5bef2f1af9cd8397ca27881524b192cf1cfa147be88bda9347aecfe94c15aba5ab8701004777542ede361804a19aa98a980e2111b289b10e4caf4b681f585d6", @generic, @generic="e2564eb667b1adb9f332ca029036b9e0ebc8bfb488c08e9857cc052b2a28dd95f1518b1659be4d7b10de0b3fec23f538d9fddc4c80088d28069e2bb296764b8e3bf29d595488a558071919eecd5e3492865d1adcb5ca7ef1d952bbe1598ff53ad954181396017fc1c0ab57ddc0dad4044f72680690fd458db0c363ce5656a770017ef6ea2c5b5eb7a41538b96a5f013a7c344235002189ab97a31d95aa36f05827587152b4415dd405feee36f179d0aeff09a6", @typed={0x8, 0x5f, 0x0, 0x0, @u32=0x3f}, @nested={0x115, 0x9, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=0xee01}, @generic="cbaf70b32bf08c1b6e6c1e46d4414035db0ec9f999852118fa78f5232ca4a3ee434c091e152c9da4d2a8726a7740f7a10d503d1e9bfea6c55e03b239eda37c34f443af7aba2f8f83e20dc7ab1e1660ae005d0b3d4ecec489a8d4acb63a603948b700ac2e565ffe0f0bb05d3c669177b10c3f79", @typed={0x8, 0x50, 0x0, 0x0, @fd}, @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@loopback}, @generic="001ea62a1abf6f7cdf42345b26da87cba47c34f12d30e0bac77387b1e1e817da5cac1e20be09284e50edfb169bbf1ff288ea94dd7a67701d3bb89fa1dfaaa665dd2365221ad9ae6ce079af8dca916ffdfa7bc1ce385b7bc1dc2dca3a6202bb3257bbdf4b4fdddc6ad5dabe4026d18c51e36f570eb864", @typed={0x8, 0x60, 0x0, 0x0, @pid=r1}]}]}, 0x2dc}], 0x5, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, 0xee00}}}], 0x60, 0x800}, 0x40) 22:24:49 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x20000000, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:24:49 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:24:49 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:24:49 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f0000000100)) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2000, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) ptrace(0x10, r1) 22:24:49 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1337.050206] bt_err_ratelimited: 10 callbacks suppressed [ 1337.050232] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1337.052529] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1337.054171] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1337.056286] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1337.056513] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1337.057791] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1337.058645] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1337.060262] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1337.060610] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1337.063530] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1337.066113] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1337.068189] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1337.070443] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:24:49 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1337.158622] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1337.159287] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1337.165377] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1337.167160] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1337.169364] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1337.171205] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1337.172188] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1337.193456] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1337.195308] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1337.197392] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1337.200373] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1337.207323] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1337.210463] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1337.215370] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:01 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:01 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() ptrace(0x10, r0) 22:25:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000180)=""/60, 0x3c}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="300000000000000001000000f5000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c003abe77d6b2104a086990d43b90c81aaf1b4f8e62e2000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, 0x0, 0x46) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x181f01, 0x18) dup2(r2, r3) 22:25:01 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:01 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x8000000000000000, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x92, 0x5, 0xc5, 0x6, 0x0, 0x3f, 0x600, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe81, 0x4, @perf_config_ext={0x4, 0x5}, 0x90d1, 0x2, 0x2, 0x7, 0x8, 0x7, 0x4, 0x0, 0x150, 0x0, 0x5}, r2, 0x1, 0xffffffffffffffff, 0x8) waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000600)=""/88, 0x58}], 0x3, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xc0}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/66, 0x42}, {&(0x7f0000000940)=""/12, 0xc}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/237, 0xed}], 0x5, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x2, 0x100, &(0x7f0000000c80)) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=[r4, r1, r3], 0x3, {r0}}, 0x58) 22:25:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x2006, 0x0, 0x0, 0x7070}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x8) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x9, 0x0, 0x6}, {0x800, 0x5, 0xe5, 0x4}, {0x4, 0x80, 0x40, 0x6}]}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x1, 0x0, 0x18, &(0x7f0000000180)=""/24}) fork() 22:25:01 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000019100)={{r0}, "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"}) [ 1349.483099] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1349.483583] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1349.486122] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1349.488990] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1349.489650] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1349.491313] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:01 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r1, 0xb, r0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x301001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0x80, 0x4, 0x4, 0x0, 0x1, 0x47100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x9, 0x300000000}, 0x441, 0x20000000000000, 0x9, 0x2, 0x40, 0xfffffd0e, 0x5, 0x0, 0x9, 0x0, 0xffffffffffff8001}, r1, 0x5, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01fb6bfcff000000000006"], 0x18}}, 0x0) [ 1349.570778] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1349.571891] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1349.573571] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1349.576937] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1349.577910] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1349.579393] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1349.589241] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1349.593372] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1349.597861] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1349.602422] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1349.606673] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1349.607482] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1349.608082] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1349.613372] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1349.613556] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1349.615271] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1349.616542] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1349.618342] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1349.620846] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1349.622701] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:01 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:01 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:01 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:25:01 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x8, &(0x7f0000000000)=[{0x2, 0xff, 0xc4, 0xfe}, {0x239c, 0xff, 0x4, 0x100}, {0x8000, 0x6b, 0x1, 0xe8e}, {0x5, 0x7, 0x1, 0x6}, {0x400, 0x1d, 0x3, 0x2}, {0xc, 0xfe, 0x1, 0x4}, {0x7, 0xff, 0x7f, 0x1}, {0x9, 0x81, 0x81, 0x3}]}) fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x20}) 22:25:02 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r1, 0xb, r0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x301001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0x80, 0x4, 0x4, 0x0, 0x1, 0x47100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x9, 0x300000000}, 0x441, 0x20000000000000, 0x9, 0x2, 0x40, 0xfffffd0e, 0x5, 0x0, 0x9, 0x0, 0xffffffffffff8001}, r1, 0x5, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01fb6bfcff000000000006"], 0x18}}, 0x0) [ 1349.924646] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1349.935645] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1349.949830] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1349.950972] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1349.954732] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1349.955507] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1349.956319] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1349.956506] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1349.964388] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1349.968590] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1349.974268] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, r0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:25:02 executing program 1: listen(0xffffffffffffffff, 0x20) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1350.102765] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1350.105225] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1350.112256] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1350.118358] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1350.120246] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:25:13 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r1, 0xb, r0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x301001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0x80, 0x4, 0x4, 0x0, 0x1, 0x47100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x9, 0x300000000}, 0x441, 0x20000000000000, 0x9, 0x2, 0x40, 0xfffffd0e, 0x5, 0x0, 0x9, 0x0, 0xffffffffffff8001}, r1, 0x5, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01fb6bfcff000000000006"], 0x18}}, 0x0) 22:25:13 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f00000003c0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:25:13 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:13 executing program 5: read(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x7c, 0xe9, 0x1, 0x8}, {0x4, 0x3, 0x6, 0x8}, {0x0, 0xff, 0x1f, 0x6}, {0x55ae, 0xff, 0x0, 0x7}, {0x0, 0xff, 0xff, 0x2eb9}, {0x7, 0x7, 0x6, 0x80000001}, {0x0, 0x3, 0x6, 0xffffffff}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r2]) r3 = getpid() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f0000002840), &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0a0000004af45227fe5713e91f751bbe746e79999c6391dc0bf91f5c809f982a79292a6ebcd72c411a5655cad07cebbb7e2e725b34855a37c6db77683c802dff9acd96badb32dda1927904cb952aadaf7a2477acc1a0eff681629b8a13ce2775d420bf9dd62fc904f96157c966c67364896f58314ca41c61a54de4b982a85e8a7fb612af11030eb11c0ea7c3d194dce8a8b6813cb9919091ed002a9d9698434e192e2e6d42f6abd8157b53632bf666ebbd0a4646f9168e0f0ee84409ac449a633fdeb5a038aeb84edb100322aed6a6e4b2a5316e5031edc702a2560c3043164f16f832d4000fef000000000000", @ANYRESHEX=r5, @ANYBLOB=',\x00']) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r9]) r10 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = fork() waitid(0x1, r11, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r11, 0xb, r10, 0x0) sched_getaffinity(r11, 0x8, &(0x7f0000000200)) r12 = syz_open_dev$vcsn(&(0x7f0000004a80), 0x6, 0x363100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001100)="5a37a8519071a2004de32eed30aa5311cca2d1647fa1c65badb38f03ad80fb549cb6ae9e0ee0e3ef96e7c5d86e78c122b7d4ff04c31df28b6a62f561786af9659858b6a77fa3506c82fe9c1d4008384ce687c178fa33a5c7acd29df53c3b996a16e8195e85a6f196e87c422059adc0af3eeef95b62b1463a9624bb9e4979266c56ff8c1bedc011a46790e420ece35a3bafd17c40ed59480188a1ee60dbc90b53b5f03c5c19aeb77005678a", 0xab}], 0x1, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0x100, 0x1}}, {{&(0x7f0000002100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000002180)="cb541da51a77cf560eb871babf145a14d4d035b83ce5a07f303013d337bb3d3acdcbe920d7bccadc658c5f9e4ba4c1060e9570e15b9826fe3a2d26a41c09663674c6a8aad3d12eb4368472cc1b93de7d8d0d9230b5a6248f46651ce30a476f1e34fc68eb9c489492e6b8eea3", 0x6c}, {&(0x7f0000002200)="e80a885e10d6cc4f", 0x8}, {&(0x7f0000002240)="7a842a0f6852b775fb9b", 0xa}, {&(0x7f0000002280)="bf452a0d983e5e2ef07f5908484c9f42e3cf2c8e2cfde652233efd82d1778a345a47d380404172b9f5d1b884dcee45e5d5430b0535227734279e5c3aeaf0ef284ce9dbe61c4e87b019fafb366a61f9b453529dafac87b0961753b42c9652cd27480003c6aa726ccca5e94db3a93c79ff32988a354ae8c16a8f2c4f07472d8d5a01f54f82082bab84748c5af1b9d3d53b4dc045d8da8abf6b9dd9b3bfb2442bc7d27a25a18f367abe2e6498da77a3618f3ba6e53116576712d82145120fe6d618fd25d785e8118131e8d09c7630912797a1b274e934cf14e800e103c89e3edd956b6dfd73070b0b995c1ba8b28bb0eeb5", 0xf0}, {&(0x7f0000002380)="98ace9768e2e7d82484bfa1adc3f96bfaf2ab117759e04700c13", 0x1a}, {&(0x7f00000023c0)="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", 0xfc}, {&(0x7f00000024c0)="19166dbd64cc34184ee965ad1ae0e4dd4733211750eec403a5de67f9f632a6b7", 0x20}], 0x7, &(0x7f0000002580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x40, 0x40050}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000025c0)="13ac0374545d63de2ddfafbecbbeb594ff3d7a9ecd0c59d98f674dcd4602c824648c2ddacc873128e423ed5dc32efda1d01672d9bc78e8e546839a320acc106ff23b6ddfbbf68f839dbaa7a115ee8d5e18ad671be61f12dcfc9b074def7bf69e5e7aed59352e89bb69bfc6cf8eb6805a7acf417dbcfc28ec98014a31f4473f4aa167aa82f82da2ef483c21a01a43808cbd", 0x91}, {&(0x7f0000002680)="d39d80dcd50018eef064b2f8f814f24857b285d8421c11bede2e90308ee96af703be59f908763427775fa6dfdcb6cbc359473d3a299b682db607cc1c6b9eee5d1806471a168301b7298ff95330fc7bbf429c7fbd76c79ee3a1d73c99", 0x5c}, {&(0x7f0000002700)="6458b8efc7c2aab770567c5eb520872b9fc7f7639f55b2be36c4e9f1ebf6e80fc504679b0c92e6eb4bfdeebe318742735655fe482972f111044978fe4f872f450935ee7b3b8da19bc849d720f7f42338d225827dd9ab74252bd2a938284e43f48a208d131b00659214c3993f49267adb8ac7c4acb6d3aab82ecd1368bbee08a913a1a52dbdd2e733e0bb34c5ecacaf4cddcd11c85c7266ba5c6e72300e758e9822432120cd79f51b46ebd684ee26612c91b114bb0d4be3d1038f24be42ea30444b93", 0xc2}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="b7f77e93c524807a07500e36131841203e6bd68c4016dafc1da68cb64ff7effb6c7aeab6aab009adbacd330a7693caa634cad9db293f3db3bc033eb4f007704e6f375f46859445e30719d45828ce0c253cb6ec8b261c029507672e03c819822a2b664efea6bcf1ca9124cb6e9a33088351808685d749cb9ca40eecc037113d448efad24aff197b0492bf15e260d15e8e5804735feb401ba1853e4f4bd530cf5e0b04c650048f", 0xa6}, {&(0x7f00000038c0)="8e999acea74510e5a0eb9fa2faf02135a1eb8c403b9adece8aa83f24409fd5d4d7aac2f330b04e3971d733156ef1b77950ac6eef4c5737dbd958505c133558e03f6465171f059ac2d711e7392b736f10e89abc3dbef1c6091b0e92707aea01f7a63f57ea43adf111bd290f4739a2e0f5b9d500e2082a97cf6653f6fab549a748c7f8edaf81638762be2c28515b1d7f167b58f84432a5d3006f9e07a2591954227384a706260ea6ac50ae4eb22347919230b23824d4ef3e7a688a695a88d6b4c21f767f456dcb23852ccfde8e78fa803af56cf1ba13a15729df0bcc1a734f2077a1e352feb42c45d494f2e208052d0b997dae", 0xf2}, {&(0x7f00000039c0)="927ce878bf3371589eb9ef9fde3560b0cd68c104e20ed68dd5df97d0b3469d5739753591f740f05b2814d5562bdcde8d2d0e60fa5fde91d472a46fde281f98065a44cfb3b17ee2455eefc131ed4584e6b46b9df502bb395fa2ace25292d8f87350dff067d0295c5c43bb0597af31323951c31bc0dad71f27411ed2836d4414d01542f308526c88da367aeb42d48ca1f2f6a636967e6ee24d9144aa04f21e65397cba6a5690212456688cb417ea903157bbfa532ba4f3550b78b4f72bc5dda2dbcdc59d2be37372329d4fe2a067c55066f42da951f4cb803584f45b4fd5c6763469389d70e2798e9826b54d6dffe38484bad62203bb340b57270c23b656d3596e039c7d33da77774ee935246ed5d6b6d80dce33d503e55073eea5201da3a74fe3daf9cf0f0388cbc8576703633e4e79a5db8bf6bb17ce89bbf7cd23c11662ee1bd2bb0832445ef80dd8056385c188f1f794b24842139cbefde6e42e117cc2755344bf706446074a8bfa943b7ced607f3e843580db0672244d7e795cf023f06dcd17204dc3ffff17befd15f57d466174c41f4eb3cb3b67db7a92afca98b1c4d8f929d2808fe7da8118a671830f6a093d6ad33f917b3ec94c98c679754fd4284f231dc41561be146e400c705a3782af204fcddf82c73a2bac15129308b7a149cd7afdc494fc47ef80caddccbc543d8448dabccbf7ca9934d4ac173c31a66543152958ba45c10b5d8e25ac4980a75d5dfa6815afec2b828d9abedf7c66d7a6faaba5168837bd3e5d6d2728b1c4969de8141b0760259eee9100c648915c7054f8621bfd046a02873142d9dc6e6f061314161a61a64ffb144d6426187182126d8d7083737d2a077684f55cb6d6830c47dd7243bc06c352721d94206b9164efc28ab8b8b4b9c6771bf7cd4d6154cf87cd017d9adb771aaca290d38a636df41d9cdf67cf08ee0264491dac396954e1b8dd35aa8c65c7c7834b203a23c488c416e7627c8d49c3a761a59b269053cb1124810661a1e63984ef39dd3bb05edff4c87b97803591c0e7d533c205e38ffed6dc43433bc421345a126a2a3d110e87d1ae72a2bdc494272188ebbe8b3d39cc531b37979ad023ace6e9b5606806d9a4754584ff38c72db2dad09ff4bf380dc21ccd9df660a0d2c0d92c89be93f11b8400995d131d7d54a4d008187d29267b96ff5b53d87d1cf21f08253793896ae5ff24c5d96d8319b7deda2a738c9b4e5b3ddf58e924667e52a6522eedc6f8e402d7f426b396c04d3c8b16c6da3ee6ec876ff4a23d3c2f9343aa74dd46a5b3c51a8516e5eabb1d5056e4aa5e0b9b9dab8fc7f2b6a68dd6fc8151311501071b931e97655d7a5389ef4cd52b0e8a96ac34b80005b17766a001c3c99faed4cae8a409b0bb3414eed378c134fc84ef509c39c6545c3a29f05c9f84448b223d0f3c98935a9688a11c3c6596a1c441edec43e38392963bb7b00d910425a35f51375651b7ae1c274386bbb894380ea4fe24a1747734dbf8f4a54f06a6b07915fc4c0ad2cc1679be176b715e6467bc211c098870bed7d83d1ea5eeda484c6e6a3cec2a4162ac3c659f6902d6d737e11382c5b836b365a68123d4d598c9a30a5db70e4a7bcac215865294c97c068963918c5bed2195c66e910fc8b2c8ad622a0458db042f7de4df499ba0582c98aeadfc0f887e8f33898b29fa01d67ef7a6dfbeac70c1b61d11d95f4417114979ac59a79af663d26aa1a3ad3aed9645f610289e2c1fb617c61cefc73b2f1f54ba8941baa5a2174af9d83888359289aff0dbe19f15c2da00a6ba72f91a91bf648e87a9d540ea49a6ec741274bd4ba8a12c5e240f62280f076c47a97d9d343e5755ab8748fa78c8aa1dc8d39d2ea427a1f1192847823ad400546bfc578f75dae1c68d85add802309ad0a3f3bd01522f9293be7a274c591b97f890854be0dc6a83016ad45a28c729630eb6c873fc3a392682bd219774ebcc92db29ab2b815c9b034ba374aa527747573de790b27cb3359c3cdfb6ec501f4c09a59660cba52d45066c7e6b4282820280c57d40332119bc4a4ca0d3e48f99f2648e584f65977e1b8d5dd2d0534a47be1df3fd6ac284aa9564efccda476e92da66aa5ec85744fb3ad3d10cd702dd120b3e87bbbf2c046ac363ff2f67875f596732cf0fbe224452e2df939a39ec3ab26e69c798711987f08e40b6bf9daadc5c7d673d51d28dc7473bf577576dafa60e5cc70872f821e43d350121f4595c13e31cd15bd9fce88c021de8d6ee9d18971e739a54b0a62547eb145f2552b0c3bd159ac3f4662b94d93eb8c633570068148f3d9e2a8ecc3dfced6e6ea9a4ca25927f19e1122add0cfab7f2ce5f91611fbb166043c6b721a0d0d06242b3c5b971f65c49146db7a5a71ded129904f900d2f6d9900be07ed47f7193078e52dbe8a82facc4652d02e2df9c24f094812eb456aa48cfa6ca35da73396d16e431672f886295c288df0883bd574e279cee535d66a25cb3702c18f0d71ff6c4e836fc102fdee241892267045bcd5c975c12ac2b770fdee89bbc5b39b8231ad1da857359e55dfb698c7ba0f8b630983a08ed106737a1402ee809e1ff0d7a5e8c31059ff699ce5c2622e4f73933510492ef8b62afffff2b2e15aa9362327a15b10dc3b78db3da721f1955c7a9c0b60650a2e6cf28f1ad06bb863806dae9df82e0e425586762902397aae5d30c69713a45c31a30edc59d5a2a37a9e5c80cb12159e4e788d8e3599016b4afc20eb115abb129cf3973917326f61ab76174a6fa4d7fa5587e214c2c1170889c66cab45bdb1709f92636116f590fd21bf576df19d64a7351a3c5284176daabd075615bcfd5706288a61181ffa9edff6f6fbbff718cea647ca440ad86ef6659068de4950464fd3066a13f92b2e1620706629a26758aa6e4fce591bb10024277f40cc0d0373ea72eac55c6a42d1b185d89e5637c60c6fd2ad4c857d6ca7ca6d846d1384309b4325d3ddca2d3abd99aaddda4243d9e1468911ff2e90e58665dfe2568b5a6855df444a7fda4c76649dce6b1c7e030b044470762847a044d2b6ef8d80a94a2301b77573c92070d71eceb9f1cddf4f1a7a73c66b8748d00a9ba2c8510a5cd540ece0a30d385a07002cc2a6b6455e8559d2a0bd77c80fc30a60eeaea81e2f54ee4b213b3fd58e635db69af9b1768a4c6a2c94ac0adc34cc890893a22fdf90171970ca4aa04b3c2803ea1baa162f216312c31172428411708dd49bd5bb61517d8ed8326ee5d7c76368616fb47d7da0c55290cf34f0c4f4a6e3e76468f0ae942374a651e2812b13c3b03e0a90dadce7ffa3e4d23d996dbde2839efa4f8660ca3bbca8862eb7e312efa337decd3f136a95739cd9c695a4e0c81b5ed62bd14e1fff19a36707a3d4b69f9ec41021a595e21d9c1563779b701e301c3cfd55787aa7d10c9eb4d3517cabc1b457c1377dad7170e00bc4c7df7322cd56a970fd096561145f63997c7c867748c2bd7d0d61873d84869bfdccde760387ae221e680320d159f5ceecdf1a7a471a937619422f15ccbd4d1c497390c64bb77597314956e23d11600e78d65f19a89ea23bac1e407c605b392f1f18c32dc971b105555696470a32bddde5ae75d9bd28a2fd46474bc2bbc11266d297e6d7fc9a348f79f97ada18f68314015ec764360bac84e49628581c85c0d95d870cbd7da7db1de8b79830e2a4ecfaeb0ab7fa75cded226ef1468210c1448b5ecde8fbedfb5e999d7f360d5ccaebc36fe030b99e0be6217f5691faf08747b401a6d60cf067afc2fb9f6271a2e58186885e3cf7da5101cdc2c5e3deb26ded7c61521fd6fa08698eb545949121b20c3331a8a5a9a05d7af0544ec74ba94b05a5ecbb6bab276cdf389d5f53ece195da55e0384cb8b289ec4be089747123dc6e4a4f52f7621a9bfd5a65a6d2d85fefcf0491cd3cb13722c6345123173631579bd3d4e45d97e9b32a54f3fd18ad51b14829c21c412d24c99e83bc0babf4dc64155e8b6d66759cc799819bee557b17aa0c4392126d754b4a50df792b6ff526831317b00c2b0c30bf0430271465b86f25f69b23fdc238e58191f6c80ed6b99405680e7d2d8ed96b03a278f82a6297ffafa976ea44a5b06f566cbe4e0afcd6d2bf5baaf860a5255081f35a9a7ff5261e752da9a692d1e9c0a0a5aa53c66c5a6146ca63c421bbfada6de00c1d4926be0a7f16639b193532b69d30484bf4590f26a54ed609c74d8661bbac512c259ce74ac2ee7cbd8090124ac630ef5a42f535fa8dab3ddd7ba85ae8deb6e99168f42c42206b231d90df9323cee3be81d34454494ffb83dc61405f8e9dcc37215a88784a90bb3540416ac4e0ac70a75255844621d85d35e6a09254b4d2fbbcebcf2c7d5ec222f22da5d7bd90303db2d3cb04123864b655b732d8b92cb0e18218d01dad1686819bee0f15d39ae2faa04e7780d613a85515a3f71b9bbaa696e75d6e45e0fc41d35dbce2f73c021df0e8b043ed2e5912067c0ed11c925a93d5d6b7b8e505cd55c36cf9bfd4eb30fd06e7e0b2c811bbdf4e8b30a3405f91abce9e61fbf74f0f5e41b56e8c1c21c8c7805f0d53db478f4efa65218415232e1526cdb77201b5ca0268beb63a70eb9257dd2ba7be208d6e9276e023939d8089ea892c8eccb4982b7c04338c1a7382abfaac89af8547b69a2f9cdc753d67c99b8d4da9042674760655732d3c720ae0bcf98e1085f8a631b35046a7e0abec9231bfe51e06b64265ebfc3e3d7e335954dea11edc3660304059bd1c72452507e2498d8a9369b69363f1f7695822e3f41fdbe2e532b520065f04b25a66704ba70f96c537eead6714e2875bc22721f5244065592a52e2f953124501a06ebb236893f39baf8cd715cf04c86555a88e7c4657ecbb635ef227ae0b98e07d736924bc15aa353d3dfc567b3737b26a7288f2ec35d123a2869d38b59b54776cbed2fd5577356b3088796ffbcae728c5e4b9d74484898ad374d8a458d47525ad512f6b6fc16d85a2679bace43ef29c4c1d82f58d5e212f94ecf2eb2725eef5dfc85548055df09c06b9d2d6434225a08337e5ba602e66dbd5999d5d359b1b553b8cf489f87c9c695aaa3612eff0f491ccf43880ce375862af4f50fbfc3ce3973a0bb9168e4223958ab0453a8c8270c4d02a0314b82ba13d3c1c76be0adcb3fd8b35b9634372ada81a169d3da850efbfe7aaa7eb1087bc076c9a4421bd36bad491b8c7b449d913510616121f66a1e47803ce0482d0f8d4314e7357eb27f7698ecb0cdb67256308de4d8c3f0fd4c4921a7c6b828f0856f894e57ba58d2c9edf9cc81e79a49e96dc780affe4e319b1dd27c519a1da3957852653f0cc669e54ecfd94d4b5d669af285f618b2dbdba163a4882a711045690be747d932a63be901e41177cc0d3551f09efbdf6d8fa3a268430ab4e446179ce1570eb041dae1dc2911015b4cc0add9e339da98d1b9f12ffad8413f1b765658ac47984f26856a04e937b81f097c6014811e19f2e1c159417b8f7cac6162ca93a4cc01f3a458ce116a21d9155677aee53b8fed63032eb241132272ac7b7c444007c3bb8a01f437f6ba13657d856948d4237911563508697a932f9020fec2109287a323d4c76526fc06f00ea48f31c651a766ed4a839eb5f29fed2d6edf0cf76f155fe00f2bc355ed976fc80eca7298e9f1c308392e2ba6fb3faa1b3ea039de4f3eff6cafdf938056ec37d86703d0a7e2cf324b33b068b6b56ba32962340fc2e565a8bbe53b2dbc942f6a7cbfbdbdd19f0d5eba279e9959af64288c3a07fad0", 0x1000}, {&(0x7f00000049c0)="c665b3f9e858e9de0ff8e3ba9e8af3955f96474097904eb66f4cf8c108f572907027231647398154ad53", 0x2a}], 0x8, &(0x7f0000008cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r9}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r6}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x78, 0x4080094}}], 0x3, 0x40000d0) fork() 22:25:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000019100)=0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000019300)="1e40531d7d5e4fad79da8fe4df0f4c363ffa4c778a0682151aeff340a521ff418257d9be94ebd4cd5d1081934b9af615b8ca86f536d90c2e9296803ac90f2efa0b1dd5e27c5dac783a522d7db859d6154385477b54138248aa4fe52c67b27ad0a6b68559ba8b6e426d6b49f00ee45155845d672eca9d5ef86c499a94201c4895e985018211993cf4f199b7ee6b76437f062df9") fremovexattr(r1, &(0x7f00000192c0)=@random={'os2.', 'drbg_pr_ctr_aes256\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) r4 = dup3(r3, r0, 0x0) sendmsg$sock(r1, &(0x7f0000019280)={&(0x7f0000019140)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x80, &(0x7f0000019200)=[{&(0x7f00000191c0)="511bdbf07939c4007a6582aade1cd51c0ac263b477fc2046568874581c150cba43cab7c6559bf95483ef846ca5374d03dc98c5605bbfa04ce62f2c78", 0x3c}], 0x1, &(0x7f0000019240)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x8004) recvmmsg$unix(r4, &(0x7f000001b100)=[{{&(0x7f00000193c0)=@abs, 0x6e, &(0x7f0000019740)=[{&(0x7f0000019440)=""/128, 0x80}, {&(0x7f00000194c0)=""/87, 0x57}, {&(0x7f0000019540)=""/84, 0x54}, {&(0x7f00000195c0)=""/180, 0xb4}, {&(0x7f0000019680)=""/162, 0xa2}], 0x5}}, {{&(0x7f00000197c0)=@abs, 0x6e, &(0x7f0000019f00)=[{&(0x7f0000019840)=""/15, 0xf}, {&(0x7f0000019880)=""/50, 0x32}, {&(0x7f00000198c0)=""/243, 0xf3}, {&(0x7f00000199c0)=""/242, 0xf2}, {&(0x7f0000019ac0)=""/164, 0xa4}, {&(0x7f0000019b80)=""/149, 0x95}, {&(0x7f0000019c40)=""/33, 0x21}, {&(0x7f0000019c80)=""/93, 0x5d}, {&(0x7f0000019d00)=""/248, 0xf8}, {&(0x7f0000019e00)=""/208, 0xd0}], 0xa, &(0x7f0000019fc0)}}, {{&(0x7f000001a000)=@abs, 0x6e, &(0x7f000001b080)=[{&(0x7f000001a080)=""/4096, 0x1000}], 0x1, &(0x7f000001b0c0)}}], 0x3, 0x2003, &(0x7f000001b1c0)={0x77359400}) [ 1361.414431] bt_err_ratelimited: 4 callbacks suppressed [ 1361.414456] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1361.415774] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1361.417511] Bluetooth: hci5: ACL packet for unknown connection handle 3557 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x2, 0x7f, 0x0, 0x4}, {0x401, 0x7, 0x20, 0xff}, {0x100, 0x4, 0x2, 0x2ba6f16c}, {0x200, 0x0, 0x6a, 0x7f}, {0x100, 0x5, 0x80, 0x800}]}) 22:25:13 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev}, {@in6=@remote, 0x0, 0x6c}, @in=@multicast1}}}, 0xf8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ptrace(0x10, r0) 22:25:13 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1361.420978] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1361.421162] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1361.423655] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1361.423765] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1361.425707] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1361.427068] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1361.429643] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1361.431431] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1361.433241] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1361.435312] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1361.445350] tmpfs: Unknown parameter ' [ 1361.445350] ' [ 1361.456321] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1361.457325] Bluetooth: hci7: SCO packet for unknown connection handle 200 22:25:13 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1361.474629] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1361.479278] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1361.485707] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1361.488400] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:25:13 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1361.490059] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:25:13 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1361.588230] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1361.588753] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1361.593205] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1361.596177] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1361.598297] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1361.598716] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1361.600204] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1361.603498] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1361.609747] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1361.611294] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1361.611323] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1361.612105] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1361.612903] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:13 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000019100)={0xb, 0x4, {0x1, @struct={0x7dad, 0x3}, 0x0, 0x350, 0xffffffff, 0x20000000, 0x0, 0x78, 0x2, @struct={0x0, 0x101}, 0x4, 0x2, [0x4, 0x9, 0x1, 0x9, 0x81, 0x8]}, {0x7, @usage=0xbf7, 0x0, 0x8, 0x5, 0x32c8162a, 0xda2, 0x3f, 0xc, @usage=0x8, 0x8, 0x7, [0x6, 0x1ff, 0x0, 0x3f, 0x4, 0x100000001]}, {0x6, @usage=0xfffffffffffffff9, 0x0, 0x6, 0x6, 0x9, 0x3f, 0xa03, 0x402, @struct={0xffff2f95, 0x81}, 0x1, 0x7fffffff, [0x8, 0xfffffffffffffff7, 0x3f, 0x8, 0x9]}, {0x53c8, 0x5, 0x3}}) 22:25:13 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1361.731430] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1361.736465] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1361.738568] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1361.742500] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1361.747297] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1361.788382] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1361.790607] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1361.800676] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1361.803797] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1361.816603] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:26 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:26 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:26 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() ptrace(0x10, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000001100), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x0, r4, 0xd8fc}) 22:25:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) pread64(r0, &(0x7f0000000080)=""/120, 0x78, 0x6) 22:25:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r1, 0xb, r0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x301001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0x80, 0x4, 0x4, 0x0, 0x1, 0x47100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x9, 0x300000000}, 0x441, 0x20000000000000, 0x9, 0x2, 0x40, 0xfffffd0e, 0x5, 0x0, 0x9, 0x0, 0xffffffffffff8001}, r1, 0x5, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01fb6bfcff000000000006"], 0x18}}, 0x0) 22:25:26 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{}, "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"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() 22:25:26 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() syz_io_uring_setup(0x7154, &(0x7f00000005c0)={0x0, 0xc872, 0x10, 0x2, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000640), &(0x7f0000000680)) waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() waitid(0x1, 0x0, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = fork() waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r5 = fork() waitid(0x1, r5, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) clone3(&(0x7f0000000540)={0x8108000, &(0x7f0000000180), &(0x7f00000003c0), &(0x7f0000000400), {0x1b}, &(0x7f0000000440)=""/74, 0x4a, &(0x7f00000004c0)=""/31, &(0x7f0000000500)=[0x0, r2, r3, 0x0, r4, r2, r5], 0x7}, 0x58) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) 22:25:26 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1374.175431] bt_err_ratelimited: 4 callbacks suppressed [ 1374.175457] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1374.178559] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1374.180455] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.181742] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1374.182003] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1374.182917] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1374.183720] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.185273] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1374.186289] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.187025] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1374.188154] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1374.189612] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1374.190759] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1374.220953] Bluetooth: hci5: SCO packet for unknown connection handle 201 22:25:26 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:26 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1374.227279] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1374.260652] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1374.261907] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.267377] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.269729] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1374.272409] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:26 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x3, &(0x7f0000001180)=[0x0, 0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x1f, 0xffffffffffffffff, &(0x7f0000000f40)="f7fec51407d75393b0dbfc255cb20347defdfacfb82132ae316a5d3afbe9e446cc6c41cc9aace0dfbc958f6270154dc0a51ad116553f914271a00396159067c7910fba645fe91a907c390b795cde8efb", 0x50, 0x3, 0x0, 0x2}]) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x4, 0x2, 0x0, 0x9, 0x0, 0x8000, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x7fffffff}, 0x4, 0x20, 0x5, 0x3, 0x9, 0x6, 0x7, 0x0, 0x7f, 0x0, 0xce3}, 0x0, 0xc, r0, 0x3) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0x70, 0x7, 0x3, 0x0, 0xccdb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x2, 0x100}, 0x1002, 0x3ff, 0x0, 0x0, 0x5, 0x91, 0x3, 0x0, 0xe95, 0x0, 0x4}, 0x0, 0x2, r1, 0xc8025f6a85d0bedd) r2 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r3 = fork() waitid(0x1, r3, &(0x7f0000000040), 0x100000c, &(0x7f0000000440)) r4 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r2, r3, r4], 0x3, {r1}}, 0x58) 22:25:26 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) clone3(&(0x7f000001a240)={0x40000000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000019100), &(0x7f0000019140), {0x7}, &(0x7f0000019180)=""/107, 0x6b, &(0x7f0000019200)=""/4096, &(0x7f000001a200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) pread64(r1, &(0x7f000001a2c0)=""/117, 0x75, 0x20) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x7, 0x9) lseek(r0, 0x80, 0x3) [ 1374.407378] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1374.408017] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1374.410253] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1374.412927] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.413625] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.416093] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1374.416731] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:26 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1374.446207] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1374.446401] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1374.448025] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1374.449542] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.450871] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.451912] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1374.452758] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1374.464546] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.468523] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.474353] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.476280] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:26 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:26 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1374.547099] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.547888] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.549312] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.550399] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1374.553618] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1374.554312] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.555448] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.556166] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1374.556996] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:26 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1374.592389] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1374.596922] Bluetooth: hci7: ACL packet for unknown connection handle 201 22:25:26 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1374.610895] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.611544] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.613075] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.613891] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1374.614430] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1374.615142] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1374.615675] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1374.730975] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1374.731718] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.733338] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.734375] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1374.735379] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7a, 0xf8, 0x5, 0x1}, {0x3, 0x20, 0x2, 0x4}]}) fork() fork() 22:25:27 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:27 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:27 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed, "db90e9"}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x3, 0x4}, {0x0, 0x5}}]}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x8, "e47157", 0x6, 0x9}]}}}, 0x12) [ 1374.878063] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.878982] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.880140] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.881677] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:27 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/213, 0xd5}], 0x5, 0x7, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r4, 0x301, 0x70bd28, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000050) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9effffff}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) close_range(0xffffffffffffffff, r0, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x8400, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r9, 0x4, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0x10) r10 = fork() ptrace(0x10, r10) 22:25:27 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1374.916179] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.917047] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.918077] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.919466] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:27 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1374.949665] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1374.950545] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.951800] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1374.953132] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1374.958310] Bluetooth: hci0: connection err: -111 [ 1374.979322] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1374.980703] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1374.982592] Bluetooth: hci0: connection err: -111 [ 1374.991297] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1374.992742] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1374.994428] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1374.994516] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1374.997782] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1375.001307] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1375.003663] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1375.026413] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:27 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:27 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1375.192214] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1375.194339] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1375.196377] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1375.198528] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1375.200318] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1375.256666] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1375.258391] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1375.260671] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1375.262382] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1375.264449] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:43 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x2480, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() rt_sigqueueinfo(r1, 0xc, &(0x7f00000003c0)={0x24, 0x800, 0x38f7}) waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) fork() r2 = dup3(r0, 0xffffffffffffffff, 0x80000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x4c0, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x3, 0x9, 0x7f, 0x0, 0x100000000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x40000, 0x5, 0x6, 0x6, 0x804e, 0x10000, 0x7, 0x0, 0x4, 0x0, 0xffffffffffffff81}, r2, 0x9, r3, 0x0) clone3(&(0x7f00000002c0)={0x50000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100), 0x0, {r0}}, 0x58) 22:25:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/166, 0xa6, 0x3) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) pread64(r1, &(0x7f0000019100)=""/102387, 0x18ff3, 0x0) 22:25:43 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:43 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() ptrace(0x4208, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r2}, 0x1, 0x6, 0x24}) 22:25:43 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:43 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:43 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xfffb, 0x6, 0x8, 0x5}, {0x3ff, 0x7, 0xf7, 0x10001}]}) r1 = fork() r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1, &(0x7f0000001440)=[{&(0x7f0000000100)=""/78, 0x4e}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/59, 0x3b}, {&(0x7f00000014c0)=""/30, 0x1e}, {&(0x7f0000001240)=""/134, 0x86}, {&(0x7f0000001300)=""/19, 0x13}, {&(0x7f0000001340)=""/136, 0x88}, {&(0x7f0000001400)=""/21, 0x15}], 0x8, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001100), 0x4) fstat(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0, 0x0}, &(0x7f0000002f80)=0xc) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002fc0), 0x42180, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000001100), 0x4) getresgid(&(0x7f0000003000), &(0x7f0000003040), &(0x7f0000003080)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000001100), 0x4) fcntl$getown(r0, 0x9) stat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000001100), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000011c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc, &(0x7f0000002dc0)=[{&(0x7f0000001500)={0xd4, 0x1c, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="7bfb264e89d05d", @typed={0x8, 0x69, 0x0, 0x0, @u32=0x101}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x2}, @generic="b1fd2d97c91246d1bc3f93c9e7cb8c8aef97bb27aaee570289c23efb82265daef1b7b9252bb929c5b873b80757bf642a5f223e0a49f544ecc4280158fe2c7793dbbc5dcefe5a913375fee4b9f3073be2b417ea51aa964bb9468832526f721ea77a74add24e7f5ff4ce616930aa2fcb95922d77bd70c4b3984f19620319b26fe6f19dac467b20e58aa9332e4927da", @nested={0x4, 0x87}, @generic]}, 0xd4}, {&(0x7f0000001600)={0x11f0, 0x20, 0x800, 0x70bd28, 0x25dfdbfc, "", [@generic="1319a5a17686e9eb793da9d52470036d7c52664d072e6cef46ab93cc0cc6af5a591dd03aa919d70b4fd3ecefb1bae39148234a353fbee9d610231a4c31acaf94e3e8715f42d3dc71b95f78cd1de0e60b824560351bb03338d3dfbc6d5f16335406fa634c876f1c87c203038f54cd60caabdbc77ffcbeb7f74bf242495ee0da7f9fe66b2e51fdac0ff1cccf12eb450b6d0c85a703480657304675885b2553", @typed={0x8, 0x74, 0x0, 0x0, @u32=0x4}, @nested={0x1138, 0x7d, 0x0, 0x1, [@typed={0xc, 0x8c, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @typed={0x8, 0x16, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x4e, 0x0, 0x0, @fd}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r2}, @generic="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", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="93da62ecffae6e2e9e8cd09b2cac68b0910c06b0c6547e89f2a4d5e43ea6820e947df9b593dd35e5345264772eddc5e3c2f061a88c1218f5a57a66976ab585b043b6a065b3ab2975368134e5b60dfb46e4df236563abc51bf68b7908b72bea9e20f75fe2a33dd10acd314f3732b20a479aa456852195a333cbd7aab69ea4e225f1797c483fabae74257116fbb2e898711395d49e0af60c77721d0460c459969f04ff9ead9f44311f6e24de7d5019cfdf3eeb33bbdb0a4e80165c9c5a53952f28809e651c7895028a8fc73e08dc436d378fc5e736a6b292c293c8106e5c2894065ebcc6650a733aa4b9cff7a8"]}]}, 0x11f0}, {&(0x7f00000032c0)=ANY=[@ANYBLOB="600400001c00010028bd7000ffdbdf25de015080c7dc78fa3b76927b249e13172eff37a404149c44c67f74cadadd0514f8d5ebdfba0f489d4855c62eb5398a65083b3418c421d5f4c836b05d1b73558b9a7c9609110158c5f1fe4b4722486820a2f9d0aadd3e5ab14944a613669cbe2c3e3f229977c6e416383d81c6a572c23ec45bf271cb8966febafb71912c681e61fa4c0e9e0a8bb412c5ac2494593eef77024832b0e876947f15837776307fa7fc5cf2ad86c850f2d31b44fc438fd904a3dcc1cd5d0b8f4edccabce4e781a369e830ae7d4af20ea98f6c6cc1ab60484b5d82250c000c00060000000000000008008c007f0000016061bcb46051f618c4162d7a6cd0914f9180b6cd7e32a3ce31616871f1730b30a705eeac979b5277026b909e159187f577c5c2697c7e1cb625d08b73c8c1b8606e0f7e479bb989cc9801cd05f1b922cdd9f96e27b4ca8bc0077203f9c81b23daac2e052da28f574ed20fbc9f2ceb757fc17d013458d9230d1b2f9b6223b50ed5b750763caaa60799e50ed9be6768b92bf25c265139aab55b61253c55dd54e22e31c5ab05d198f2e911883f1f5ae5027b50e9dcd215b57775661bb4028a742eab29e038d2988c7872ca1ed9320cd07b87776b02edb43f5647042393300c0030007200c2690000000008009100", @ANYRES32, @ANYBLOB="08001b00ac1414bb000044011f802e74a7a88efe008643cbb2a74522b7ee0c00e1411254a3c250fdb5f2bfb15c595de6ddacad702afaacadf7b41100ff2af6a63e1a60da0eb8d762bc4e0abf565905388875ae6429ef7eed7a44cb3afbbf3a3fa5dec9791b6b125f0bd9eac0cff7690f30a3ec5b8a92d925b9677edcfb7f6f3b4e452809d2cfeade01163c72161db38ff37da172e857ad5c83fd788d7c04835ab18cc51aacef70177504be396051b058810000000000", @ANYRES32, @ANYBLOB="f8ab0c633608008d00", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="15662337cbabc2d889f085cf62035762"], 0x460}, {&(0x7f0000002c80)={0x118, 0x29, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x33, 0x0, 0x0, @pid}, @nested={0xfe, 0x2, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0xe}, @generic="dc3b79fad2f5afbf3adb993c911016b1de95f7d4c35319e02ebe889d52ad262cbc121262a86fde6fc7fa61558eaa70c99334cc8d0af05e82ff8380fd85bbbf118099853b4d563d83ec1a84e0c0e12fc4eff7e119e83435bc105d7154eb51ff9a0e9326d7018a27cc5095974e4ef1ff7744344b3668a6694e9a9b714db8ebb259a5b0664ab17575a2a1c701f12edb3d3e30e26483f606e617a2b985fdcf027181c7d17b61f13e3448d8d01263b527097b2aaa7846b8a63fcab519f4b279a1c7e3bf1198c0cb5166d8f245a85061931768fc1d29d253b6e3334c89d11043ab9d6bb0ffc6e5c97256abe4c646c5530d"]}]}, 0x118}], 0x4, &(0x7f0000002800)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r5, r6, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0xd8, 0x40000}, 0x40088) ptrace(0x4216, r1) 22:25:43 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1391.267500] bt_err_ratelimited: 26 callbacks suppressed [ 1391.267516] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1391.269695] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1391.273067] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1391.274456] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1391.275563] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1391.276462] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1391.277421] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:43 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1391.311058] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1391.311262] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1391.315708] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1391.316535] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1391.317323] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1391.318614] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1391.318750] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1391.319388] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1391.320760] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1391.321641] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1391.322662] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1391.323593] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1391.324420] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1391.326724] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1391.333905] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1391.354067] Bluetooth: hci0: ACL packet for unknown connection handle 200 22:25:43 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:43 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1391.420677] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1391.422203] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1391.426519] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1391.428682] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1391.430007] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1391.431119] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1391.432330] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:25:43 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x408000, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='/proc/tty/drivers\x00') io_setup(0x400, &(0x7f0000000000)=0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) io_submit(r2, 0x2, &(0x7f0000019280)=[&(0x7f0000019180)={0x0, 0x0, 0x0, 0x1, 0x3, r4, &(0x7f0000019100)="2bac027b5ccb70a8af4b02007802a6fd3479e5ef0882ced370a0e7143cee94534e579e11c5e550b61c08867c31f95e5bc239c6f7b18d64deec0bf50d1b0717f5bf9d2a836ba02c2bd2", 0x49, 0x4, 0x0, 0x0, r1}, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f00000191c0)="214a8644a72d4532d88522e473752dded83fa608a8e69460e94a381a05d0fb25e8cbd91cfb55f6d9ed7b8b187329329900e3dc36214590642287617705a6e3e6a0e03c", 0x43, 0x0, 0x0, 0x1, r0}]) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1391.518324] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1391.520797] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1391.524716] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1391.526731] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1391.528083] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1391.529328] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1391.530756] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1391.532313] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1391.535035] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1391.541331] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:43 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:43 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:43 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1391.634373] Bluetooth: hci0: ACL packet for unknown connection handle 3557 [ 1391.635796] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1391.643532] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1391.646116] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1391.647746] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1391.650085] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1391.651334] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1391.699350] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1391.701199] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1391.702570] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1391.703897] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1391.711739] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1391.712957] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1391.715317] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1391.716587] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1391.718056] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:25:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b3a, &(0x7f00000000c0)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0xffff) 22:25:54 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3, 0xbb, 0xb, 0x6}, {0x4, 0x80, 0x81, 0x1}, {0xff, 0xff, 0x80, 0xee4e}]}) r1 = fork() ptrace(0x10, r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0xd5, 0x9, 0x0, 0x1, 0xf2024, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x101, 0x1c00000000}, 0x1020e, 0x1, 0x4, 0x8, 0x8, 0x9, 0x3, 0x0, 0x906, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r2, 0x2) 22:25:54 executing program 5: fstat(0xffffffffffffffff, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) fork() 22:25:54 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0x0, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x0, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:54 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000019100)={0x0, "26bc91cbbef53dafde36a482ac4f9d58698cd182e65eced2dd011bfbff2bdbaf44a8b37e9292ab71225f19eaa116daca0bac2ff0fb3b620475bfa24af1b735d7", 0x28}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x15, r2, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000019200), &(0x7f00000191c0)={'syz', 0x1}, &(0x7f0000019240)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00abcdefghcjklmnopqrstuvwxyz0123456'], 0x29, 0xfffffffffffffffd) keyctl$setperm(0x15, r3, 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x28, 0xfffffffffffffff9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000100)=""/102400, 0x19002, 0x0) keyctl$get_security(0x11, r3, &(0x7f0000019340)=""/107, 0x6b) request_key(&(0x7f00000193c0)='cifs.spnego\x00', &(0x7f0000019400)={'syz', 0x2}, &(0x7f0000019440)='fscrypt:', 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000019180), &(0x7f0000019280)={'syz', 0x0}, 0x0, 0x0, r1) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x15, r6, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r6, r2, 0x1) keyctl$get_security(0x11, r2, &(0x7f000001a5c0)=""/196, 0xc4) preadv2(r4, &(0x7f000001a580)=[{&(0x7f0000019480)=""/30, 0x1e}, {&(0x7f00000194c0)=""/40, 0x28}, {&(0x7f0000019500)=""/126, 0x7e}, {&(0x7f0000019580)=""/4096, 0x1000}], 0x4, 0x401, 0x0, 0x13) r7 = add_key(&(0x7f00000192c0)='user\x00', &(0x7f0000019300)={'syz', 0x1}, &(0x7f0000019340), 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, r7, r0, 0x0) 22:25:54 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0xfb, 0xfc, 0x1, 0x0, 0x10000, 0x1000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x8}, 0x12080, 0x2, 0xbaf, 0x9, 0xff, 0x6, 0xbfed, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0x3, r0, 0xb) r2 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r3 = fork() r4 = getpgid(r3) fcntl$setlease(r0, 0x400, 0x3) clone3(&(0x7f0000000a80)={0x0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x15}, &(0x7f0000000640)=""/82, 0x52, &(0x7f00000006c0)=""/239, &(0x7f0000000a40)=[r4], 0x1}, 0x58) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r1, 0xd3850000) waitid(0x1, r3, &(0x7f00000007c0), 0x1, &(0x7f00000004c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000001100), 0x4) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000180)=0x81, 0x4) r6 = fork() fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r2, r3, r6], 0x3, {r0}}, 0x58) [ 1402.613295] bt_err_ratelimited: 10 callbacks suppressed [ 1402.613324] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1402.616068] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1402.616385] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1402.621448] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1402.627246] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1402.627337] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1402.627702] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1402.627996] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1402.628072] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1402.629087] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1402.629296] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1402.629335] Bluetooth: hci5: ACL packet for unknown connection handle 201 22:25:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x0, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1402.629654] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1402.630210] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:25:54 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1402.631673] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1402.632181] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1402.635357] Bluetooth: hci1: ACL packet for unknown connection handle 201 22:25:54 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1402.639996] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1402.640203] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1402.641976] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1402.798701] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1402.799677] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1402.801283] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1402.804070] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1402.805496] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1402.807109] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1402.807326] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1402.809404] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1402.810202] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1402.812074] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1402.817444] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1402.820995] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1402.821631] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1402.879482] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1402.881288] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1402.888094] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1402.891695] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1402.896154] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:25:55 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:25:55 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r4]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x808, &(0x7f0000019100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_none}, {@msize}, {@cachetag={'cachetag', 0x3d, ',^'}}], [{@smackfsdef={'smackfsdef', 0x3d, '![\''}}, {@audit}]}}) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:25:55 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x0, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:25:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x2, &(0x7f0000000000)) r0 = fork() ptrace(0x10, r0) [ 1402.994068] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1402.995209] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1402.997504] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1402.999055] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:25:55 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1403.088135] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1403.092248] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1403.093109] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1403.093735] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1403.094557] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1403.135246] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1403.137442] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1403.139469] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1403.142215] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup2(r2, r3) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x1000) r5 = fork() waitid(0x1, r5, &(0x7f0000000040), 0x1, &(0x7f00000003c0)) r6 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r5, r6], 0x3, {r0}}, 0x58) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) 22:26:05 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:05 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000019100)={{0x20, 0x2}, {0xad, 0x4}, 0x2, 0x2, 0x6}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000019180)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x1) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) 22:26:05 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x7, 0x89}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1, 0x8, 0x6) r2 = fork() ptrace(0x10, r2) r3 = fork() waitid(0x1, r3, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = fork() waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) kcmp(r4, r3, 0x2, r0, r0) tkill(r3, 0x12) 22:26:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1f}]}) fork() gettid() 22:26:05 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x0, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:05 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000019100)={0x0, "26bc91cbbef53dafde36a482ac4f9d58698cd182e65eced2dd011bfbff2bdbaf44a8b37e9292ab71225f19eaa116daca0bac2ff0fb3b620475bfa24af1b735d7", 0x28}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x15, r2, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000019200), &(0x7f00000191c0)={'syz', 0x1}, &(0x7f0000019240)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00abcdefghcjklmnopqrstuvwxyz0123456'], 0x29, 0xfffffffffffffffd) keyctl$setperm(0x15, r3, 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x28, 0xfffffffffffffff9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000100)=""/102400, 0x19002, 0x0) keyctl$get_security(0x11, r3, &(0x7f0000019340)=""/107, 0x6b) request_key(&(0x7f00000193c0)='cifs.spnego\x00', &(0x7f0000019400)={'syz', 0x2}, &(0x7f0000019440)='fscrypt:', 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000019180), &(0x7f0000019280)={'syz', 0x0}, 0x0, 0x0, r1) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x15, r6, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r6, r2, 0x1) keyctl$get_security(0x11, r2, &(0x7f000001a5c0)=""/196, 0xc4) preadv2(r4, &(0x7f000001a580)=[{&(0x7f0000019480)=""/30, 0x1e}, {&(0x7f00000194c0)=""/40, 0x28}, {&(0x7f0000019500)=""/126, 0x7e}, {&(0x7f0000019580)=""/4096, 0x1000}], 0x4, 0x401, 0x0, 0x13) r7 = add_key(&(0x7f00000192c0)='user\x00', &(0x7f0000019300)={'syz', 0x1}, &(0x7f0000019340), 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, r7, r0, 0x0) [ 1413.804168] bt_err_ratelimited: 8 callbacks suppressed [ 1413.804192] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1413.805456] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1413.807760] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1413.810413] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1413.812190] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1413.813679] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1413.815050] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1413.853606] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1413.854495] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1413.855899] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1413.857734] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1413.861309] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1413.864248] audit: type=1326 audit(1752877566.087:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35181 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 [ 1413.868169] Bluetooth: hci1: ACL packet for unknown connection handle 201 22:26:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000019100)={0x157c, 0xa, 0xa, 0x600, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_EXPR={0x1544, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x1534, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_TO_DATA={0x25c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6effe64bd2ab5f8b}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "f6b62b4e01c4fa8f190f1f35f48405265a022bdbb430962a"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "faa1b35cbae3d24fe69119c59ea09087181880732086261ab2ebc623282dcec30f45173dfe466e04941cd571fcac67cd4b7a348887b90df528"}, @NFTA_DATA_VALUE={0xdf, 0x1, "2baef979f8f1ec6ae0faa94577a0b237bdff20f0cf52501137a3ad55720a7d35f0ef8b892ccdcbac57f12a895c527ff9a0a9faf035f5d2a98ae86c8ae59d660c140246eeeb2d73b15e97b3c0dbc030ba8b1e3b221fde012269cd85b095204283834557a709d84b70f892148ef393b3d73ed76556f436c30e42f2602718ffb0b86ce830f8a4a84ea0209489ef8269d8867996e313df9c29a36c20bb670f36fb173788a985e5ac9833d7d1205f85fa1c01a6216aa603fdbe6f533f036183cede20cfe9ca2818f47f0950fc3e6ff24064488b63d6ca847e5fd721a141"}, @NFTA_DATA_VALUE={0x94, 0x1, "5019858a5e2390eb3a73286a2cd11ccdd7c16fe5d9e6878fc0c463813fa880834ca2fc41cd574a44cebd3f0a5b325e8b3e689b4738300da055b916b6663fb8479c335bf1534fa03ee89a88caa6a641cdbfe0695a1b13fa92df5d4452131bf15ccd34222b907d7737bfbdf2a91aa1cf7dba09608fe3a27a6a0b711e90d0d265ef13eba386bfd61df90b0b5a2f17c7f6bb"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_TO_DATA={0x12bc, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x96, 0x1, "3e0918742e07ffa1287bdd93f13585df7274db4f19b622b9116f4fb3257626b532b3033b6c592cf2c5562a0a80f4326f7fb556f7c7d1601ca77b777a6a532aafbeb1f7756a5012d61e68a089188eafb5cf40fe7ae93dd702bda9e59e729f5f302e7089f5cd7d773302517b4d82741351e9bf420890650f04bbf5d7d10ec0a7617d64ad4cb7e547d20b84a7ff87b1900d6bed"}, @NFTA_DATA_VALUE={0x7b, 0x1, "61034c97d2829bf4115174c8b7bd489af9fe85ac5cbf89685316ef2753c55af44a7d6b9332781b434cdce6a43c68a52a814a1ce35150d0cfb13ac82802e9cd784de364c12ac820f23b1b09f26615518c890290c9334987c483cea27ae5d7e0cfd99dec74d4a30575676012048a62d8554365eed60e0301"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xab, 0x1, "059f0865a4c65219ea821442411282bbf74e2719d95313360ee97efe36dfd3438a012fe2405d9f3b89a3e8810ce6137b3a8288eed82e2a0750fffb502c986bf50f45780ff65b2f2b240bee1976c6b02c2797a191660fd55f7e093a0e16a9d5a2f280c4cf913f8d9e2cf2444672c7a92adda000176830a8f823e8551766b1fd7b0a53888c3e83757363a3dc6085485c06d47adc4ad55f6b9969e394e08a15dbf33b2afef094f5d3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x100000100}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}]}, 0x157c}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1413.880579] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1413.882109] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1413.883589] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1413.884945] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1413.886391] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1413.892371] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1413.894542] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:06 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r1, 0x4, 0x2000) syz_io_uring_setup(0x6561, &(0x7f0000000400)={0x0, 0x100, 0x0, 0x0, 0x1c1, 0x0, r1}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000080)=""/48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) 22:26:06 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:06 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1414.123348] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1414.125160] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1414.127388] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1414.130715] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1414.139311] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1414.140686] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1414.144230] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1414.152652] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1414.155537] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1414.158725] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1414.162203] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1414.164706] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1414.166412] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1414.169146] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1414.207319] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1414.209185] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1414.211292] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1414.214163] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:06 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:06 executing program 1: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/155, 0x9b, 0x8}) pread64(0xffffffffffffffff, &(0x7f0000019100)=""/102400, 0x19000, 0x8001) 22:26:06 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1414.343653] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1414.345218] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1414.348237] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1414.349753] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1414.351248] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1414.365340] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1414.367313] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1414.369163] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1414.371263] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1414.372663] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1414.682171] audit: type=1326 audit(1752877566.911:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35181 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb9b2fb19 code=0x0 22:26:17 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() 22:26:17 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x1cb) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x28, 0x2, 0x81, "4587b80f0f350b407cd715879066f813", "1f70bc534a4eb532be87c158a33e630fbe40f3"}, 0x28, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9432, 0xfffffffffffffff7}) 22:26:17 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x0, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:17 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:17 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r1 = fork() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x5}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ptrace(0x10, r1) r3 = fork() waitid(0x1, r3, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fork() waitid(0x1, r5, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r5, 0xb, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001700)={0x0, 0x1, 0xffffffffffffffff, 0x100}) sched_getaffinity(r5, 0x8, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/249, 0xf9}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/102, 0x66}], 0x8, &(0x7f0000003340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/165, 0xa5}, {&(0x7f0000000b80)=""/164, 0xa4}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000010000000000010000d04161938f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)=""/185, 0xb9}, {&(0x7f0000000e80)=""/205, 0xcd}, {&(0x7f0000000f80)=""/18, 0x12}], 0x3, &(0x7f0000001000)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001100)=""/206, 0xce}, {&(0x7f0000001200)=""/45, 0x2d}], 0x2}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000002780)=[{&(0x7f0000001300)=""/233, 0xe9}, {&(0x7f0000001400)=""/9, 0x9}, {&(0x7f0000001440)=""/152, 0x98}, {&(0x7f0000001500)=""/200, 0xc8}, {&(0x7f0000001600)=""/213, 0xd5}, {&(0x7f0000001700)}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/46, 0x2e}], 0x8, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f00000029c0)=""/94, 0x5e}, {&(0x7f0000002a40)=""/20, 0x14}, {&(0x7f0000002a80)=""/250, 0xfa}, {&(0x7f0000002b80)=""/233, 0xe9}, {&(0x7f0000002c80)=""/207, 0xcf}, {&(0x7f0000002d80)=""/43, 0x2b}, {&(0x7f0000002dc0)=""/156, 0x9c}, {&(0x7f0000002e80)=""/136, 0x88}], 0x8, &(0x7f0000002fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x6, 0x12040, &(0x7f0000003240)={r6, r7+10000000}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r9, 0x4, 0x2000) clone3(&(0x7f00000032c0)={0x20000000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x36}, &(0x7f0000000180)=""/135, 0x87, &(0x7f0000000240)=""/69, &(0x7f0000003280)=[r3, r1, 0xffffffffffffffff, r1, r1, r5, r8, r1], 0x8, {r9}}, 0x58) getpgid(r1) 22:26:17 executing program 4: iopl(0x6) r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x6}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x9, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xa2, 0x0, 0xff, 0x8, 0x0, 0x7f, 0x4000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000180), 0x7}, 0x200, 0x1eddf285, 0x3ff, 0x9, 0x10000, 0x5, 0x1, 0x0, 0x5c9d, 0x0, 0x2}, r2, 0x7, r0, 0xb) r3 = pidfd_open(r1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000540)=0x7) r4 = fork() waitid(0x0, r1, &(0x7f0000000040), 0x1, &(0x7f00000003c0)) r5 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r4, r5], 0x3, {r0}}, 0x58) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fork() prctl$PR_SET_PTRACER(0x59616d61, r5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) 22:26:17 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) close_range(r0, r1, 0x0) [ 1425.582634] bt_err_ratelimited: 6 callbacks suppressed [ 1425.582663] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1425.582677] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1425.586167] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1425.586372] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1425.588172] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1425.589721] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1425.590762] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1425.591531] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1425.592325] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1425.593495] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1425.594297] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1425.595483] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1425.602711] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:17 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:17 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1425.641052] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1425.641569] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1425.642253] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1425.644228] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1425.645037] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1425.648841] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1425.649416] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1425.674353] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1425.674396] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1425.675660] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1425.677017] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1425.677906] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1425.678704] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1425.680620] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:26:17 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:17 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1425.792971] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1425.793716] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1425.797388] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1425.799335] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1425.801827] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1425.802754] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:18 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r2, 0xb, r1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000200)) r3 = fork() waitid(0x1, r3, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) kcmp(r2, r3, 0x2, r0, r4) 22:26:18 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0xffffffffb88a71c2, 0x4}) pwritev2(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 22:26:18 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1425.937933] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1425.938546] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1425.939245] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1425.939842] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1425.940455] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:26:18 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) poll(&(0x7f0000000140), 0x0, 0x67e) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x3, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) [ 1425.989398] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1425.991579] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1425.999681] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1426.003685] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1426.008914] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1426.054483] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1426.055240] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1426.057307] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1426.059335] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:28 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() fcntl$getownex(r0, 0x10, &(0x7f0000000000)) tkill(0x0, 0x10) 22:26:28 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x0, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:28 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:28 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000000640)=""/164, 0xa4}], 0x8, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/161, 0xa1}, {&(0x7f0000000940)=""/113, 0x71}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/39, 0x27}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000bc0)=""/193, 0xc1}, {&(0x7f0000000d80)=""/238, 0xee}, {&(0x7f0000000e80)=""/225, 0xe1}], 0x3, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/49, 0x31}, {&(0x7f0000001100)=""/25, 0x19}, {&(0x7f0000001140)=""/249, 0xf9}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/243, 0xf3}], 0x5, &(0x7f00000023c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x4, 0x10100, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002500), 0x200, 0x0) poll(&(0x7f0000002540)=[{r2, 0x10}, {r0, 0xa0d2}, {r0}, {r0, 0x208}, {r0}, {r0, 0x65}, {0xffffffffffffffff, 0x200}, {r0}, {r3, 0x1180}], 0x9, 0x7) r4 = fork() waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) fork() r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = fork() waitid(0x1, r6, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r6, 0xb, r5, 0x0) sched_getaffinity(r6, 0x8, &(0x7f0000000200)) setpgid(r4, r6) ptrace(0x10, r1) 22:26:28 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f00000051c0), 0x3, &(0x7f0000005240)) r3 = fork() r4 = fork() waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) waitid(0x1, r4, &(0x7f00000003c0), 0x1000003, &(0x7f0000000440)) r5 = getpgrp(r2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000600)=""/164, 0xa4}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/188, 0xbc}, {&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/237, 0xed}], 0x4, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000d80)=""/3, 0x3}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/5, 0x5}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f80)=""/159, 0x9f}], 0x1, &(0x7f0000002080)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000002100), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002180)=""/10, 0xa}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000004800)=[{&(0x7f0000003340)=""/161, 0xa1}, {&(0x7f0000003400)=""/130, 0x82}, {&(0x7f00000034c0)=""/239, 0xef}, {&(0x7f00000035c0)=""/84, 0x54}, {&(0x7f0000003640)=""/214, 0xd6}, {&(0x7f0000003740)=""/158, 0x9e}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7, &(0x7f0000004880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/196, 0xc4}, {&(0x7f0000004a80)=""/30, 0x1e}, {&(0x7f0000004ac0)=""/57, 0x39}, {&(0x7f0000004b00)=""/59, 0x3b}], 0x4, &(0x7f0000004b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x7, 0x60, &(0x7f0000004d80)) r8 = epoll_create1(0x0) kcmp(r5, r6, 0x0, r8, r0) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) recvmsg$unix(r7, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004fc0)=""/40, 0x28}], 0x1, &(0x7f0000005040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x70}, 0x10000) r10 = fork() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r11, 0x4, 0x2000) clone3(&(0x7f0000005140)={0x300c0e00, &(0x7f0000004dc0), &(0x7f0000004e00), &(0x7f0000004e40), {0x6}, &(0x7f0000004e80)=""/99, 0x63, &(0x7f0000004f00)=""/136, &(0x7f0000005100)=[r1, r9, r4, r5, r10], 0x5, {r11}}, 0x58) 22:26:28 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:26:28 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a39", 0x29a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x51) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x610a2858) sendfile(r0, r1, &(0x7f0000000080)=0xffff, 0x5) [ 1436.383643] bt_err_ratelimited: 6 callbacks suppressed [ 1436.383658] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1436.384581] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1436.385528] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1436.386772] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1436.389182] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1436.389937] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1436.390600] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1436.403409] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1436.406729] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1436.411788] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1436.415658] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1436.418397] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1436.425305] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1436.441861] Bluetooth: hci5: SCO packet for unknown connection handle 201 22:26:28 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x0, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1436.445844] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1436.490354] Bluetooth: hci5: ACL packet for unknown connection handle 3557 22:26:28 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1436.499436] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1436.500200] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1436.502349] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1436.508521] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:26:28 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000400)="f873ad275a48e2a8615b57b4e0e8595378", 0x11, 0x3}, {&(0x7f0000000440)="fd48d840b7006770b8e5ce14814eb225ea553e45293eac1e79f8dcf5e4f929ab8b6815a40b4da27508e7f957a93316e2e7813f7709294c39c614217be9b5c13db11044f0609f6ff106ac00899d7427a12752f2100c0d37e7e11092fb04b6e9de8e9627330df5fb486ce3ccedf00c42037fe92b218a39be60004ca392bb90b5f02536eb12682de2b2dd6e3e5fd176f578a723758d255efd9708941a4aa47a27570d3e69369d927f008527", 0xaa, 0x10001}, {&(0x7f0000000500)="53b99e8810ff77b998063ef32c08dcd91e5024b12a03876e1373584230f82a99717d3034ef416afc7fecf41088381a255a60480823eb6123c0f90dea7572aad7538f79e05037d3fbece34ca3848a5b87784df23d0c74fa324bb666c021445aa11763f2c4dfc72260004ff581ea2f002cca78f430cbf01b82db9d148c4828670e1020644e7a5b63d83f126c", 0x8b, 0x96a8}, {&(0x7f00000005c0)="a4bee54007a64a246b9565bc178eb03598ef4eb9ee6f9509271493903fe67c0fe4b0e9a65cfa830d8b5bd278ba6756cb11d3a69f7e270d598973981f98beddd112e3302b4967207f7b7281062a0236f0386926de5d106d30c08d62517bb8011ddb9f0503304dd197825f593773e8ff47ed72f2ade815818aeeef74c029338a0787d9c1307bea024f9dd36a2bc04bc31f152c30a78943c40e65e7", 0x9a, 0x7}, {&(0x7f0000000680)="22d83ad9a2847a9b6855f7d857875c628bdc2404cb30a6303cce288419315867a9e71936af9fee8683907f7b41694bdfb89f0b25fe28d4ce30d74ca532616e08ad788b77a75afc8b787efdf37c3c637ce1474bb0f432fcd8e847f3407547ed088a3287f4158e690cd994838d6942861ed7b413c4b2a393fdac4d652488479504ac719d6b135aea486c3ed23d5e5f74ebda94e2d00885ec222f671f1a2f6f3ec4697cd9b6610f8f98007dc16cd184f2f28dcde6ec861831c36cd321751b08e3f0c2069b06fe37c022d09a6f89629911afd6a3bced0edc67bfb66d4e32bc55e313da62fff0eb946bb50f7aae7f8933", 0xee, 0x8}, {&(0x7f0000000d80)="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", 0x1000, 0x6}, {&(0x7f0000000780)="21ac53eb222fbe38e826fdd15779d6c86d6f194111d97cb5137352fe277cc979eb9d79c08580347fe6e8ffc1ca918d63c7cd09424178dd270217011a96885cf09c833bf4f43db367edae24ce587f0d366ad0437c05acf3c4dd64818341a60d6447f666407fce339496921b5bbf63b71ccdf14b0c28787b49d87b8f420b3c60eb3340476c76b7323174be40d676837a4aeea28159306a9b889131542bee4973de0831566eefe3a021b9e7043c9f80d9b995fe0e260a9df8024dcb530ade0e6e9d13e510e6cf658cbc5859f1e57a9f8d4256b0503128b2400a7fe1864afdf931c0d0baddead82bf134559c6696228c967fb122309573", 0xf5, 0xaf8}, {&(0x7f0000000880)="3d27db6305b5", 0x6, 0x8c5}], 0x40002, &(0x7f0000000980)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_win95}, {@utf8no}, {@rodir}, {@utf8no}, {@uni_xlate}, {@rodir}, {@nonumtail}, {@nonumtail}], [{@smackfsfloor={'smackfsfloor', 0x3d, ')b*/{)'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@subj_type={'subj_type', 0x3d, '($'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '-)]!{'}}]}) openat(r1, &(0x7f0000000ac0)='./file0\x00', 0xc02, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r2 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r3 = fork() waitid(0x1, r3, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r2, r3, r4], 0x3, {r0}}, 0x58) 22:26:28 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1436.638002] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1436.639600] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1436.641987] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1436.643604] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1436.646347] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1436.647426] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:28 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:28 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) poll(&(0x7f0000000180)=[{r1, 0x4220}, {r0, 0x8000}], 0x2, 0x4) r2 = syz_mount_image$tmpfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x9, 0x1, &(0x7f0000000580)=[{&(0x7f0000000500)="a81be8cf1ed9d4a30ce0589ef33586154f7554df3dbdfd87247cdaa913d247fbb0fe792d07c0b30b6184462983fbe2f37412181783b6db5ad63a9e073b6f50e4060a535fab995d780d1a2c037da8c80a123b19eb1aac6694df35c5f28b2793d088f9373d02559161a7e3f08c17b8faf5e01634158d66f7ff", 0x78}], 0x800010, &(0x7f00000005c0)={[{@huge_never}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x35, 0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x36, 0x32, 0x0, 0x3a]}}}}, {@huge_advise}, {@huge_within_size}, {@huge_advise}, {@huge_within_size}], [{@pcr={'pcr', 0x3d, 0x5}}]}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000680)=0x8) r3 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r4 = fork() dup2(r1, r0) waitid(0x1, r4, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r5 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r3, r4, r5], 0x3, {r0}}, 0x58) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x52, 0x72, 0x5, 0x59, 0x0, 0x2, 0x40589, 0xcec5dabc840067b, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000003c0), 0xa}, 0x10800, 0xffffffff, 0x7, 0x5, 0x2, 0x2, 0x5, 0x0, 0x1fa3, 0x0, 0x2}, r4, 0x8, r0, 0x8) 22:26:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) pread64(r1, &(0x7f0000019100)=""/178, 0xb2, 0x7) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) kcmp(r2, 0x0, 0x3, r1, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000001100), 0x4) close_range(r1, r4, 0x2) [ 1436.805646] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1436.806234] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1436.810971] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1436.812117] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1436.816110] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1436.817041] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1436.818829] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1436.905183] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1436.907316] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1436.910453] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1436.911356] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1436.912770] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1436.963492] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1436.964115] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1436.964884] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1436.965454] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:40 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d68642c7266646e6f1d", @ANYRESHEX, @ANYBLOB="4dee87fe90467104d7a1d2a576f4d81c72a095111d5d89e6af", @ANYRESHEX, @ANYBLOB=',fscontext=system_u,\x00']) 22:26:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() sched_getparam(r0, &(0x7f0000000000)) 22:26:40 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r3 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r3], 0x3, {r0}}, 0x58) waitid(0x1, r2, &(0x7f00000003c0), 0x8, &(0x7f0000000440)) 22:26:40 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:40 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x0, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:40 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000019100)={'vcan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0xfff, 0x4, 0x3ff, 0x2bd, 0x345c, 0x1}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000019140)={'virt_wifi0\x00', {0x2, 0x0, @initdev}}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x33, 0xc, 0x1, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, @mcast2, @remote]}, 0x68) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000019180)={@mcast2}, 0x14) 22:26:40 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7d}, @l2cap_cid_signaling={{0x79}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x82) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:40 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r0 = fork() ptrace(0x11, r0) [ 1448.529665] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 22:26:40 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000019400)='ns/pid_for_children\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000194c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000019100)="b86f17ef772fdb6b52776fe0b206522439ff51edbb7a0265dcf3095d1d83f1e7332e62e6c214dfb5b9e41631a44070fc069c85ffd13e5e4d5a4ed71003be57047ad4", 0x42}, {&(0x7f0000019180)="26d512f7e16493f84a06b9bde5a4df47657d309b97ed8ad3409b8f2a97910d31c5a7d0f88592dc7c9ad955ad64500b7b56769cb1b7a21646b7de07130cc5ec690569c023c9c370623bd30f977e97052dcd675db8c7e5736972915dfd66db4d5f5615a52d6f12c14f35673bd5e9622a8044e7e34acf6c0b", 0x77}, {&(0x7f0000019200)="49e904e5d1ce6051e3762f2a06229192c5b1014cb7ce88d638c758e5492c7d0a0e232c18c7d25504dae221093598419ec96d8d33acc9d705c37f1c9e8539f14cb5a5c482b2662fca53f6fe584218cd5a288f1822316bf8afff9c4d9a308e3f4568aff08e5cc96b0ca5b83ac5509c95cdc2a9398ce690a85f74d09d46d3e7c3e075ba2decfca618ca838600322f0c3c14ee6b2ef6faecd4de857632c0063683602192083cf565d90707edbd3ea1e15f21ebe889370e675534c5577a3977f59c3fa91b36cf36f8f34f9e67e987b078", 0xce}, {&(0x7f0000019300)="1ce7170c5d0b349349702fefda4c8a41fc82198b5cc326d0308dd2317e4278c5d91a3d9cb1fd4b750211f4e07e1a032f91c983887778a5888df3c9567d4c78b5046d0af899ee03098108ec0f5ff94c8095d2179cc90fb70e87cde2978c246c3f0d64a717cf60d10d565c41137df4a81789766e5ce54a9891ac88ae089d5732b7fdf3d542350bb60217494023c965de0435942755db577fc06dc4642de51f7dcd206d7f207ea1aa0b7701863eb8df10aabb6341c404ec3b32774c54be6700eea62110699ea719f81c517fd4c168097fcc5d831e6d2ac74030fce613720c88a89921e4f5f86f673f", 0xe7}], 0x4, &(0x7f0000019440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2]}}], 0x28, 0x40}, 0x8891) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1448.567043] bt_err_ratelimited: 4 callbacks suppressed [ 1448.567055] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1448.567542] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1448.570668] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1448.574063] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1448.578939] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1448.579549] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r1) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x3, 0x85, 0x3, 0x0, 0x8, 0x20000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x1}, 0x2000, 0x7fffffff, 0xffff, 0x8, 0x20, 0x6, 0x1f, 0x0, 0x8001, 0x0, 0x36}, 0x0, 0x3, r2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001100), 0x4) recvfrom(r0, &(0x7f0000000000)=""/43, 0x2b, 0x2000, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x7, @loopback, 0x4}}}, 0x80) 22:26:40 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7d}, @l2cap_cid_signaling={{0x79}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x82) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1448.639329] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1448.650525] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1448.660317] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1448.662694] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1448.664031] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1448.664601] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1448.665620] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1448.676387] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1448.677435] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1448.687411] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1448.688722] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1448.692771] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1448.694135] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1448.694854] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1448.695490] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1448.696689] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1448.703564] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1448.704615] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1448.707015] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1448.718553] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:54 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x7fff, 0x8, 0x9, 0x8}]}) 22:26:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8, 0x0, 0x20, 0xfffffe00}, {0x0, 0x4, 0x8, 0x3}, {0x8, 0xff, 0x7, 0xe081}, {0x400, 0x8, 0x0, 0x7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fork() 22:26:54 executing program 2: madvise(&(0x7f00008b5000/0x1000)=nil, 0x1000, 0x15) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) munmap(&(0x7f00008b4000/0x3000)=nil, 0x3000) munmap(&(0x7f0000f13000/0x4000)=nil, 0x4000) mremap(&(0x7f0000baf000/0x3000)=nil, 0x3000, 0x2000, 0xe10e52acde69bec2, &(0x7f0000ffb000/0x2000)=nil) madvise(&(0x7f00008a4000/0x1000)=nil, 0x1000, 0x2) mlock2(&(0x7f00008b4000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 22:26:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7d}, @l2cap_cid_signaling={{0x79}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x82) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:54 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:26:54 executing program 4: poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r0 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r1 = fork() r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x208400, 0x44) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000d80)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "e2edd2d48aad24"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001d80)={r3, 0x0, "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", "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"}) waitid(0x1, r1, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r4 = fork() r5 = inotify_init() readahead(r5, 0x3, 0xff) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r0, r1, r4], 0x3}, 0x58) r6 = fcntl$getown(r2, 0x9) flistxattr(r5, &(0x7f00000005c0)=""/38, 0x26) clone3(&(0x7f0000000540)={0x80200, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x38}, &(0x7f0000000400)=""/157, 0x9d, &(0x7f00000004c0)=""/29, &(0x7f0000000500)=[r0, r4, r6], 0x3, {r2}}, 0x58) [ 1462.546553] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1462.546793] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1462.549578] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1462.550943] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.552317] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.553390] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:54 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x78}, @l2cap_cid_signaling={{0x74}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x45}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x7d) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:54 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1462.601228] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1462.601458] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1462.602991] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1462.604704] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.606207] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.607493] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:54 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/102400, 0x19002, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000000000a75f023b0aa7371837735f083ad2e06a84c9f125"], 0x40}, 0x1, 0x0, 0x0, 0x44840}, 0x20040090) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000019180)={0x7, &(0x7f0000019140)=[{0x4, 0x0, 0x0, 0x1ff}, {0xfffe, 0xff, 0x7, 0xdc26}, {0x3f, 0x81, 0x81, 0x80000000}, {0x1200, 0x0, 0x1, 0x1ffd}, {0x8000, 0x3f, 0x1, 0x1bf82cd1}, {0x9, 0xf9, 0x8, 0x7}, {0x6, 0x80, 0x16}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000192c0), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000019440)={&(0x7f0000019280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000193c0)={&(0x7f0000019300)={0x5c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x43}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x28000000) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000019540), 0x113401, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f00000018c0)=[{&(0x7f00000004c0)="ad", 0x1}], 0x1) fcntl$setstatus(r8, 0x4, 0x2000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000001100), 0x4) bind$bt_hci(r6, &(0x7f0000019740)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000019240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) io_submit(0x0, 0x6, &(0x7f0000019700)=[&(0x7f0000019780)={0x0, 0x0, 0x0, 0x7, 0xfff8, r2, &(0x7f00000191c0)="48394e0bb778587fa092c4f7d5970951ae48ca6a218ce5e5b9cfb1bd7b2df15dfcae8a3d88c680621faf0eb33c8afb322cf2b9d45cdfefdda7117025bc72141b3a00ddd2be6156ebc70e5b4fc3e98225db53976b27e1d84a641fcc72c7db5c4d357c5480684fe94450e80dfed3a1ceb7d3d1916716468f35f35113cf95", 0x7d, 0x4, 0x0, 0x1}, &(0x7f0000019380)={0x0, 0x0, 0x0, 0x6, 0x65a, r4, &(0x7f0000019940)="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", 0x153, 0xfffffffffffffff8, 0x0, 0x2, r1}, &(0x7f0000019400)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f00000197c0)="90c34b6a2c413615974ff292a3b01520f73fc248833323d9da633c2157581418e3eb6305c240a79b753a1430b4dce9a8c8ada9091c62936406475392d49f843e8098c5ac2fc4a33687ca3c4b3341a96bfe0d69175d926c66eb63b5cfcc7e43d6470072fa748583160bbda7b8cb8e7ff4b73e6f5669c657b3e364fec5615b47e581555a389b4dfea31e0b6d5a56d3b38c712d51f8bc0000a2dddafde4348b5cf50b78eb", 0xa3, 0xf3c2, 0x0, 0x1}, &(0x7f0000019500)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000019880)="d1c9c446c7a4389c7a7e800c2af3bee23551fd3cd70495774d56c039900e7b1f33fcffcc1fddd96ac5c82ef2c162653333d5c40c089b5fcb103795e88e327095358da33a5766c5ec4059d6874e811faff2cb51eb45213364c80ac058ee2623c806e5d40fa8955233c1a6f5d65a3bb4f7c3c8ee8ec7ad2fafdb992da2887ef76d7a1f6fa6a1297002d51fb067685d5997829c2c2e3aa0e09c287b013bb2431b88c0fdb0815254b4ec657e", 0xaa, 0xfabd, 0x0, 0x0, r8}, &(0x7f0000019580)={0x0, 0x0, 0x0, 0x6, 0xffe0, r9, &(0x7f0000019540), 0x0, 0x10000, 0x0, 0x0, r1}, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x6, 0x6, r10, &(0x7f00000195c0)="e8e537f867a919549478e761c3172ce1793675efbf317cfd771ef0fa88e653868ec9349e35a5b4665d180182bed5b92f6496390421730c8c4ff9dfad7b5e4481aa59066e215fa75aa1041849fbe007daa4379caf3b7867f412ea564e20f5fe2b0ccb19756fe64827a4a7ee27ce20e62fd6d0ad4b5c16a977ffc9ed61942387e86f8d6b9b9c4a2940fbc0bbaffd8d67acb00d00a2e66aefd2772802ee87c7e753f010e8b4fa6d1c2f580594c26619d14564519359d8beb2a54d4894fbbe95e308f6", 0xc1, 0x3ff, 0x0, 0x2}]) [ 1462.644048] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1462.644263] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1462.645683] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1462.647666] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.648708] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.649734] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1462.682516] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1462.682721] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1462.684494] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1462.686261] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.687741] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.688736] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1462.720094] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1462.721420] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1462.724614] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1462.728295] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1462.729407] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1462.732420] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1462.734734] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1462.739677] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1462.743460] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1462.745152] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.746582] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.748077] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1462.749681] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1462.759348] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1462.760719] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1462.762096] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:26:54 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1462.801760] audit: type=1400 audit(1752877615.031:31): avc: denied { module_load } for pid=37359 comm="syz-executor.1" path="/sys/kernel/kexec_crash_loaded" dev="sysfs" ino=200 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=system permissive=1 22:26:55 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:55 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1462.899454] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1462.902476] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.905384] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1462.911456] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:26:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() fork() ptrace(0x10, r0) [ 1462.921349] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1462.922139] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1462.924137] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1462.927945] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1462.928625] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1462.930486] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1462.932022] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1462.934279] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1462.935780] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1462.937721] Bluetooth: hci5: ACL packet for unknown connection handle 200 22:26:55 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:55 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:26:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100ea000140000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'}) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@cred={{0x1c}}], 0x20}, 0x0) 22:26:55 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:26:55 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000040)="aa5f065497c8818583be05b98cc2ba2ff80ae4ce795471722590fc47", 0x1c) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1463.102188] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1463.104436] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1463.108219] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1463.109635] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1463.111140] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1463.130562] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1463.132037] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1463.133671] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1463.135050] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1463.164267] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1463.166127] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1463.167752] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1463.169235] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1463.170724] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:27:07 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x81) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:27:07 executing program 7: r0 = memfd_secret(0x80000) connect$packet(r0, &(0x7f0000000000)={0x11, 0x19, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xfffffffffffffbff, &(0x7f0000000080)) 22:27:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fork() r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r2, 0xb, r1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000200)) r3 = getpgrp(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002e80)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0) clone3(&(0x7f0000000340)={0x20000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x37}, &(0x7f0000000d80)=""/4096, 0x1000, &(0x7f0000001d80)=""/4096, &(0x7f0000000300)=[r2, r3], 0x2, {r4}}, 0x58) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x40, 0x80000) r6 = fork() waitid(0x1, r6, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) waitid(0x1, r6, &(0x7f0000000100), 0x20000000, &(0x7f0000000180)) syncfs(r5) 22:27:07 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:27:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_secret(0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_client}]}}) 22:27:07 executing program 1: sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x812, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 22:27:07 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:27:07 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = fork() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x3b, 0x0, @tid=r4}, &(0x7f0000000400)) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001100), 0x4) waitid(0x1, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) r5 = fork() clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f0000000200)=""/192, 0xc0, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=[r1, r2, r5], 0x3, {r0}}, 0x58) [ 1474.853305] bt_err_ratelimited: 16 callbacks suppressed [ 1474.853329] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1474.859634] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1474.860546] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1474.861657] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1474.862620] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1474.863438] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1474.865313] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1474.866482] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1474.868127] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1474.869640] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1474.869762] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1474.871265] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1474.871712] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1474.873096] Bluetooth: hci7: ACL packet for unknown connection handle 200 22:27:07 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) [ 1474.908575] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1474.908699] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1474.910499] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1474.913360] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1474.915222] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1474.916795] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:27:07 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:27:07 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x81) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) 22:27:07 executing program 1: io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000000)="02d23ec790a2055016aa3c9c14161079185a540784a2607dd089409ce7f9aa08f04995494852b76e5c7bb208ff", 0x2d, 0x1, 0x0, 0x1}]) r0 = perf_event_open(&(0x7f0000019140)={0x0, 0x80, 0x4, 0xbf, 0x10, 0x8, 0x0, 0x8, 0x8002, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000019100), 0x4}, 0x108, 0x41e, 0xfff, 0x6, 0xffffffffffffff7f, 0x7, 0x1, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pread64(r0, &(0x7f00000191c0)=""/102400, 0x19000, 0x21) [ 1474.995367] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1475.000702] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1475.004349] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1475.006103] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 1475.006300] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 1475.007712] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1475.010207] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1475.010887] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1475.012140] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1475.014010] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1475.014275] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1475.015579] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1475.017366] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1475.019216] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1475.058699] Bluetooth: hci1: ACL packet for unknown connection handle 3557 [ 1475.066139] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1475.068413] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1475.070030] Bluetooth: hci1: ACL packet for unknown connection handle 200 22:27:07 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x0, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x88) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:27:07 executing program 6: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x7, 0xff}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x4d}, {0x9, 0x80, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x8, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x17, 0x4}, {0x1, 0x224}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x0, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1f, 0x2}, {0x2}}]}}, 0x2c) 22:27:07 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd1}, "336d66a0de6d88953f05be78891525c3d2067bc96d6ee3a34fa2bc2e18bccb4841be37da11f5d9b6295f2a0de975a874a440c8ef9e7de98ad8b9358a72a9fa61079064ff531e2ccf474a14c34c1f4a557bd7f65c6ca4e762f35bb90e011a23855b68c656cba206ad404125b8d22c9f8d59ec2002ccc20cf5ea8283a65ca37c9239cf769054d000e80a48d78c64d7120b5d3cf609168301dc6921754500f003a6b35d6d0643bd3cda9e2936aa3a7b6ba70fd31d7e53cbece439611b5dcb9bd9b2777bf3511ae5bba375ecd36e05dbae4131"}, 0xd5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbe}, "34fc705c4a4533b5a058fd0b40145ff21b345395f48d6e2e9f718e5878ceb4a2727da325866f32b6732ad48e3f898f0701ec608a2cf9c8cb2eb19c33794086f84f2d06e46a6d9583d10edd30f4f2b39590feab272bd81448a055c97b9fba09736ac16bbcbf77e6c2fb6f8bf78b6775b17aa00e38c5850706ba9c2b27f1f2505fcf207d78db777363e6532178c86857384681b919fde4bab4e5e9986d3e42e2cf5486c6c111a6e237d9f084cde513b62b0a0e1b5adc1459d65ceaafe93b4e"}, 0xc2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1f, 0xc8, 0x7}}}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0x79dd6c9d2872fde5, 0x0, 0x3, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x4, 0x400}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x6, 0x6}}, @l2cap_info_req={{0xa, 0x2c, 0x2}, {0xb80c}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x71c, 0x0, 0x1f}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x2120}}, @l2cap_conf_req={{0x4, 0x5, 0x50}, {0x9, 0x80, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4d, 0x0, 0x80, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x81, 0xa2, 0x3ca, 0x8, 0xd1f5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0xb811}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x3, 0x6c9, 0x2, 0x993}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6e, 0xbe, 0xfe00, 0x3f, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x9, 0xfffffffa, 0x1, 0x1}}]}}]}}, 0x81) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0xc6, 0x14}, {0x7ff, 0x7, 0x6, 0x7, [0x7fff, 0x401, 0x5, 0x3, 0x2040, 0x4]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x15}, {0x401, "c87d527b86a8bd920d5b2b54d934fd1a59815c"}}}, 0x18) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x1c0, 0x749}}}}, 0x11) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0xff, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x8, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x603, 0x8, 0x161f, 0xfff}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x645f, 0x4, 0x40, 0x7}}, @l2cap_conf_rsp={{0x5, 0xff, 0xd}, {0x90, 0x6, 0x8586, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0x8}}]}}, 0x50) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}, 0xa) [ 1475.182357] Bluetooth: hci7: ACL packet for unknown connection handle 3557 [ 1475.184608] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1475.186109] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1475.187763] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1475.189226] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1475.190232] Bluetooth: hci5: ACL packet for unknown connection handle 3557 [ 1475.190275] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1475.190350] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1475.190379] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1475.190454] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1475.224357] Bluetooth: hci1: ACL packet for unknown connection handle 3557 22:27:07 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000019540)={&(0x7f0000019480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000019500)={&(0x7f00000194c0)={0x10, 0x3f6, 0x200, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x3, &(0x7f0000019200)=[{&(0x7f0000019100)="9e274e595699022c1ff473d336b1f702514b751305724fbdfc5eb0ab74157978886f1d9562bab587531015e35b6054964a35b64ed7d513d3b305f5251cd3dbab25d770060653006e21f8cd111bfcc534d51d06899cd59cf431a8d3eb82c2a1ad1cf455a6dd424dbaac14e241b4c4c3bce97f4d05e6126350e63ca9f4d96739b8f023f2814eb4e807c4a5b038096b46bd", 0x90, 0x3}, {&(0x7f00000000c0)="ed47795c5abed3aaf0aefc641d62c28f0f04f6160cef1cb30e10baefd79eadc437b7a6cc61", 0x25, 0x218c}, {&(0x7f00000191c0)="4273476d9a702d064d59e2d8607dedb9430eb0163eee0926d66845fb3d11016123cf6e03a3af4ca6b9", 0x29, 0x100000001}], 0x40000, &(0x7f0000019280)={[{@oldalloc}, {@barrier}, {@errors_remount}, {@quota}, {@jqfmt_vfsold}, {@data_err_abort}], [{@fsmagic={'fsmagic', 0x3d, 0x80}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee01}}, {@hash}, {@euid_lt}, {@euid_gt}, {@permit_directio}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r2, &(0x7f0000019400)=@generic={0x3, "ec87d21d921257c9266ee60b6c6368e09ec813bcc6fc0761691e7e03a1fbfdbb436e05992f1d58361bfdf17cdae782cdbca98df05348d5ad77539528013e081f64bdd578a5fbfa92fd67b763a7af296515f802457c837e02813952a937dfff4ccddc1107df0df1fd8d056781e08046500240b5da571d11045921ddd4d9bc"}, 0x80) pread64(r1, &(0x7f0000019380)=""/79, 0x4f, 0x1) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) [ 1475.234421] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1475.236034] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1475.244340] Bluetooth: hci1: ACL packet for unknown connection handle 200 VM DIAGNOSIS: 22:32:11 Registers: info registers vcpu 0 RAX=0000000000e8b575 RBX=0000000000000000 RCX=ffffffff84ba61c7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6d74 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643c650 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ba4efe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e0000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c001fb6220 CR3=000000000deb3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184af9440000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000076911b RBX=0000000000000001 RCX=ffffffff84ba61c7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6d74 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643c650 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ba4efe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e0000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00201ea40 CR3=000000000deb3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000040000000000000000 XMM02=61746f7420636578650a0a0100010101 XMM03=6578650e006e6567206365786508006c XMM04=6578650b006574616469646e61632063 XMM05=6d20636578650d006567616972742063 XMM06=6d7320636578650a00657a696d696e69 XMM07=00736465657320636578650a00687361 XMM08=6e6567206365786508006c61746f7420 XMM09=6574616469646e616320636578650e00 XMM10=650d0065676169727420636578650b00 XMM11=78650a00657a696d696e696d20636578 XMM12=7320636578650a006873616d73206365 XMM13=7220726f747563657865110073646565 XMM14=75662063657865090073747261747365 XMM15=000073746e696820636578650a007a7a