Warning: Permanently added '[localhost]:59691' (ECDSA) to the list of known hosts. 2022/09/19 22:14:44 fuzzer started 2022/09/19 22:14:44 dialing manager at localhost:42121 syzkaller login: [ 39.740451] cgroup: Unknown subsys name 'net' [ 39.838518] cgroup: Unknown subsys name 'rlimit' 2022/09/19 22:15:00 syscalls: 2215 2022/09/19 22:15:00 code coverage: enabled 2022/09/19 22:15:00 comparison tracing: enabled 2022/09/19 22:15:00 extra coverage: enabled 2022/09/19 22:15:00 setuid sandbox: enabled 2022/09/19 22:15:00 namespace sandbox: enabled 2022/09/19 22:15:00 Android sandbox: enabled 2022/09/19 22:15:00 fault injection: enabled 2022/09/19 22:15:00 leak checking: enabled 2022/09/19 22:15:00 net packet injection: enabled 2022/09/19 22:15:00 net device setup: enabled 2022/09/19 22:15:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 22:15:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 22:15:00 USB emulation: enabled 2022/09/19 22:15:00 hci packet injection: enabled 2022/09/19 22:15:00 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/19 22:15:00 802.15.4 emulation: enabled 2022/09/19 22:15:00 fetching corpus: 50, signal 23773/25589 (executing program) 2022/09/19 22:15:00 fetching corpus: 100, signal 39834/43209 (executing program) 2022/09/19 22:15:00 fetching corpus: 150, signal 52701/57455 (executing program) 2022/09/19 22:15:00 fetching corpus: 200, signal 58062/64212 (executing program) 2022/09/19 22:15:00 fetching corpus: 250, signal 61239/68779 (executing program) 2022/09/19 22:15:01 fetching corpus: 300, signal 64498/73367 (executing program) 2022/09/19 22:15:01 fetching corpus: 350, signal 70374/80393 (executing program) 2022/09/19 22:15:01 fetching corpus: 400, signal 76014/87100 (executing program) 2022/09/19 22:15:01 fetching corpus: 450, signal 81937/93924 (executing program) 2022/09/19 22:15:01 fetching corpus: 500, signal 87137/100081 (executing program) 2022/09/19 22:15:01 fetching corpus: 550, signal 91444/105293 (executing program) 2022/09/19 22:15:01 fetching corpus: 600, signal 94527/109320 (executing program) 2022/09/19 22:15:01 fetching corpus: 650, signal 97098/112841 (executing program) 2022/09/19 22:15:02 fetching corpus: 700, signal 99618/116295 (executing program) 2022/09/19 22:15:02 fetching corpus: 750, signal 101773/119416 (executing program) 2022/09/19 22:15:02 fetching corpus: 800, signal 105253/123623 (executing program) 2022/09/19 22:15:02 fetching corpus: 850, signal 108102/127228 (executing program) 2022/09/19 22:15:02 fetching corpus: 900, signal 109406/129463 (executing program) 2022/09/19 22:15:02 fetching corpus: 950, signal 111809/132605 (executing program) 2022/09/19 22:15:02 fetching corpus: 1000, signal 116023/137186 (executing program) 2022/09/19 22:15:03 fetching corpus: 1050, signal 117342/139403 (executing program) 2022/09/19 22:15:03 fetching corpus: 1100, signal 119884/142536 (executing program) 2022/09/19 22:15:03 fetching corpus: 1150, signal 122212/145473 (executing program) 2022/09/19 22:15:03 fetching corpus: 1200, signal 124992/148825 (executing program) 2022/09/19 22:15:03 fetching corpus: 1250, signal 127041/151468 (executing program) 2022/09/19 22:15:03 fetching corpus: 1300, signal 128030/153243 (executing program) 2022/09/19 22:15:03 fetching corpus: 1350, signal 129993/155722 (executing program) 2022/09/19 22:15:03 fetching corpus: 1400, signal 132237/158413 (executing program) 2022/09/19 22:15:04 fetching corpus: 1450, signal 134793/161326 (executing program) 2022/09/19 22:15:04 fetching corpus: 1500, signal 135678/162948 (executing program) 2022/09/19 22:15:04 fetching corpus: 1550, signal 137886/165548 (executing program) 2022/09/19 22:15:04 fetching corpus: 1600, signal 139279/167487 (executing program) 2022/09/19 22:15:04 fetching corpus: 1650, signal 141941/170323 (executing program) 2022/09/19 22:15:04 fetching corpus: 1700, signal 143696/172421 (executing program) 2022/09/19 22:15:04 fetching corpus: 1750, signal 145160/174332 (executing program) 2022/09/19 22:15:04 fetching corpus: 1800, signal 146472/176088 (executing program) 2022/09/19 22:15:05 fetching corpus: 1850, signal 148230/178163 (executing program) 2022/09/19 22:15:05 fetching corpus: 1900, signal 149923/180126 (executing program) 2022/09/19 22:15:05 fetching corpus: 1950, signal 151780/182167 (executing program) 2022/09/19 22:15:05 fetching corpus: 2000, signal 154685/184947 (executing program) 2022/09/19 22:15:05 fetching corpus: 2050, signal 156296/186811 (executing program) 2022/09/19 22:15:05 fetching corpus: 2100, signal 158745/189149 (executing program) 2022/09/19 22:15:06 fetching corpus: 2150, signal 159406/190347 (executing program) 2022/09/19 22:15:06 fetching corpus: 2200, signal 160359/191734 (executing program) 2022/09/19 22:15:06 fetching corpus: 2250, signal 161713/193294 (executing program) 2022/09/19 22:15:06 fetching corpus: 2300, signal 163257/194988 (executing program) 2022/09/19 22:15:06 fetching corpus: 2350, signal 164487/196419 (executing program) 2022/09/19 22:15:06 fetching corpus: 2400, signal 165847/197909 (executing program) 2022/09/19 22:15:06 fetching corpus: 2450, signal 166656/199096 (executing program) 2022/09/19 22:15:06 fetching corpus: 2500, signal 167787/200412 (executing program) 2022/09/19 22:15:06 fetching corpus: 2550, signal 168551/201529 (executing program) 2022/09/19 22:15:07 fetching corpus: 2600, signal 169553/202723 (executing program) 2022/09/19 22:15:07 fetching corpus: 2650, signal 170155/203699 (executing program) 2022/09/19 22:15:07 fetching corpus: 2700, signal 171007/204825 (executing program) 2022/09/19 22:15:07 fetching corpus: 2750, signal 171644/205806 (executing program) 2022/09/19 22:15:07 fetching corpus: 2800, signal 172814/207074 (executing program) 2022/09/19 22:15:07 fetching corpus: 2850, signal 173544/208082 (executing program) 2022/09/19 22:15:07 fetching corpus: 2900, signal 174034/208966 (executing program) 2022/09/19 22:15:07 fetching corpus: 2950, signal 175888/210574 (executing program) 2022/09/19 22:15:07 fetching corpus: 3000, signal 176788/211624 (executing program) 2022/09/19 22:15:07 fetching corpus: 3050, signal 177707/212649 (executing program) 2022/09/19 22:15:07 fetching corpus: 3100, signal 179618/214123 (executing program) 2022/09/19 22:15:08 fetching corpus: 3150, signal 180771/215239 (executing program) 2022/09/19 22:15:08 fetching corpus: 3200, signal 182321/216544 (executing program) 2022/09/19 22:15:08 fetching corpus: 3250, signal 183222/217507 (executing program) 2022/09/19 22:15:08 fetching corpus: 3300, signal 183894/218301 (executing program) 2022/09/19 22:15:08 fetching corpus: 3350, signal 184559/219104 (executing program) 2022/09/19 22:15:08 fetching corpus: 3400, signal 185201/219902 (executing program) 2022/09/19 22:15:08 fetching corpus: 3450, signal 185786/220661 (executing program) 2022/09/19 22:15:09 fetching corpus: 3500, signal 187022/221663 (executing program) 2022/09/19 22:15:09 fetching corpus: 3550, signal 187724/222464 (executing program) 2022/09/19 22:15:09 fetching corpus: 3600, signal 188977/223465 (executing program) 2022/09/19 22:15:09 fetching corpus: 3650, signal 190063/224415 (executing program) 2022/09/19 22:15:09 fetching corpus: 3700, signal 190854/225182 (executing program) 2022/09/19 22:15:09 fetching corpus: 3750, signal 191681/225941 (executing program) 2022/09/19 22:15:09 fetching corpus: 3800, signal 192842/226914 (executing program) 2022/09/19 22:15:09 fetching corpus: 3850, signal 193428/227600 (executing program) 2022/09/19 22:15:10 fetching corpus: 3900, signal 194244/228337 (executing program) 2022/09/19 22:15:10 fetching corpus: 3950, signal 195131/229099 (executing program) 2022/09/19 22:15:10 fetching corpus: 4000, signal 196602/230084 (executing program) 2022/09/19 22:15:10 fetching corpus: 4050, signal 197400/230798 (executing program) 2022/09/19 22:15:10 fetching corpus: 4100, signal 198120/231437 (executing program) 2022/09/19 22:15:10 fetching corpus: 4150, signal 198958/232154 (executing program) 2022/09/19 22:15:10 fetching corpus: 4200, signal 199595/232755 (executing program) 2022/09/19 22:15:11 fetching corpus: 4250, signal 200335/233385 (executing program) 2022/09/19 22:15:11 fetching corpus: 4300, signal 201083/234021 (executing program) 2022/09/19 22:15:11 fetching corpus: 4350, signal 202166/234755 (executing program) 2022/09/19 22:15:11 fetching corpus: 4400, signal 203037/235399 (executing program) 2022/09/19 22:15:11 fetching corpus: 4450, signal 203873/235981 (executing program) 2022/09/19 22:15:11 fetching corpus: 4500, signal 204546/236530 (executing program) 2022/09/19 22:15:11 fetching corpus: 4550, signal 205304/237079 (executing program) 2022/09/19 22:15:11 fetching corpus: 4600, signal 206144/237679 (executing program) 2022/09/19 22:15:12 fetching corpus: 4650, signal 207091/238293 (executing program) 2022/09/19 22:15:12 fetching corpus: 4700, signal 208697/239029 (executing program) 2022/09/19 22:15:12 fetching corpus: 4750, signal 209543/239565 (executing program) 2022/09/19 22:15:12 fetching corpus: 4800, signal 210179/239997 (executing program) 2022/09/19 22:15:12 fetching corpus: 4850, signal 211045/240460 (executing program) 2022/09/19 22:15:12 fetching corpus: 4900, signal 212099/241004 (executing program) 2022/09/19 22:15:12 fetching corpus: 4950, signal 213040/241541 (executing program) 2022/09/19 22:15:13 fetching corpus: 5000, signal 214003/242084 (executing program) 2022/09/19 22:15:13 fetching corpus: 5050, signal 215144/242530 (executing program) 2022/09/19 22:15:13 fetching corpus: 5100, signal 215784/242913 (executing program) 2022/09/19 22:15:13 fetching corpus: 5150, signal 216566/243297 (executing program) 2022/09/19 22:15:13 fetching corpus: 5200, signal 216973/243626 (executing program) 2022/09/19 22:15:13 fetching corpus: 5250, signal 217959/244049 (executing program) 2022/09/19 22:15:13 fetching corpus: 5300, signal 218578/244423 (executing program) 2022/09/19 22:15:14 fetching corpus: 5350, signal 219283/244765 (executing program) 2022/09/19 22:15:14 fetching corpus: 5400, signal 220209/245163 (executing program) 2022/09/19 22:15:14 fetching corpus: 5450, signal 220920/245452 (executing program) 2022/09/19 22:15:14 fetching corpus: 5500, signal 221788/246191 (executing program) 2022/09/19 22:15:14 fetching corpus: 5550, signal 222377/246467 (executing program) 2022/09/19 22:15:14 fetching corpus: 5600, signal 222860/246748 (executing program) 2022/09/19 22:15:14 fetching corpus: 5650, signal 223411/247020 (executing program) 2022/09/19 22:15:15 fetching corpus: 5700, signal 223984/247293 (executing program) 2022/09/19 22:15:15 fetching corpus: 5750, signal 224670/247613 (executing program) 2022/09/19 22:15:15 fetching corpus: 5800, signal 225780/247864 (executing program) 2022/09/19 22:15:15 fetching corpus: 5850, signal 226310/248092 (executing program) 2022/09/19 22:15:15 fetching corpus: 5900, signal 227456/248342 (executing program) 2022/09/19 22:15:15 fetching corpus: 5950, signal 228082/248530 (executing program) 2022/09/19 22:15:15 fetching corpus: 6000, signal 228599/248731 (executing program) 2022/09/19 22:15:15 fetching corpus: 6050, signal 228926/248905 (executing program) 2022/09/19 22:15:16 fetching corpus: 6100, signal 229518/249085 (executing program) 2022/09/19 22:15:16 fetching corpus: 6150, signal 230236/249128 (executing program) 2022/09/19 22:15:16 fetching corpus: 6200, signal 231012/249330 (executing program) 2022/09/19 22:15:16 fetching corpus: 6250, signal 231440/249340 (executing program) 2022/09/19 22:15:16 fetching corpus: 6300, signal 231875/249340 (executing program) 2022/09/19 22:15:16 fetching corpus: 6350, signal 232548/249351 (executing program) 2022/09/19 22:15:16 fetching corpus: 6400, signal 233000/249351 (executing program) 2022/09/19 22:15:16 fetching corpus: 6450, signal 233387/249355 (executing program) 2022/09/19 22:15:17 fetching corpus: 6500, signal 233804/249359 (executing program) 2022/09/19 22:15:17 fetching corpus: 6550, signal 234349/249385 (executing program) 2022/09/19 22:15:17 fetching corpus: 6600, signal 235107/249386 (executing program) 2022/09/19 22:15:17 fetching corpus: 6650, signal 235445/249387 (executing program) 2022/09/19 22:15:17 fetching corpus: 6700, signal 236604/249395 (executing program) 2022/09/19 22:15:17 fetching corpus: 6748, signal 237071/249403 (executing program) 2022/09/19 22:15:17 fetching corpus: 6748, signal 237071/249403 (executing program) 2022/09/19 22:15:19 starting 8 fuzzer processes 22:15:19 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x2, 0x8, 0x3}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200140, 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r3, r2], 0x3) read(r1, &(0x7f0000000180)=""/4096, 0x1000) r4 = socket(0x3, 0x80000, 0x6) r5 = dup(r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e24, 0x1ff, @empty, 0x8}}, 0x0, 0x0, 0x25, 0x0, "7e710fc066615ca2b7e128ef94433c34e404772d337fbd33f37139b93b8cfef700cfb0ddf1b00efbe97d74d6d41509d64de2888279d44bbbd4ec4f4e757b3aa998f7adb37321a5ce4ff8e7f9989ace68"}, 0xd8) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000001280)=""/15, 0xf}, {&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/57, 0x39}, {&(0x7f00000014c0)=""/245, 0xf5}], 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) openat(r6, &(0x7f0000001680)='./file0\x00', 0x105080, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000016c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001700)=""/181) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000017c0)={0x1, 0x6, @status={[0xb2, 0x9c, 0xffffffffffffffff, 0x3, 0x2, 0x5]}, [0x8, 0x8, 0x8001, 0xfffffffeffffffff, 0x1ff, 0x20, 0x9, 0x6, 0x7, 0x2, 0x8001, 0x0, 0x3, 0x8001, 0x10000, 0xc9, 0x9, 0x6fd5, 0x5, 0x9, 0xffffffffffffffe1, 0x8000, 0x2d3d, 0x7, 0x4, 0x40, 0xa69, 0x6, 0xffffffff, 0x7fffffff, 0x800, 0x6, 0x7fff, 0x2, 0x3fe0000000, 0x3, 0x5, 0x1, 0x1, 0x3, 0x5, 0x9, 0x2, 0x3f, 0x8, 0x3, 0x3, 0xffffffff, 0x3f, 0x80000000, 0x4, 0x3, 0x0, 0x40, 0x9, 0x8, 0x3, 0x1, 0x101, 0x4, 0x3, 0x8001, 0x0, 0x2]}) openat$incfs(0xffffffffffffffff, &(0x7f0000002240)='.log\x00', 0x800, 0xc2) 22:15:19 executing program 2: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x7ff, 0xfffffffb}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8001, 0x12401) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2202, 0x0) r2 = dup(r1) r3 = dup(r0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000100)={0x6}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000005c0)=0xff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file0\x00'}) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) r5 = open$dir(&(0x7f0000000680)='./file0\x00', 0x101000, 0x0) fadvise64(r5, 0x5f, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000c40)={0x7, &(0x7f0000000b40)=[{0x6, 0x44, &(0x7f00000006c0)="aae73391528fa58b9cfdc334140d4484a0aa8e7e07ca2720da7c8f639d525bae18262d3ebefdbe32b60fe62a285f0314e0bb503a3047cc279bfd7b0ecf725905aecd4901", 0x1, 0x1}, {0x9, 0xd0, &(0x7f0000000740)="a76cefff1c6ceb4027693884f0412bef2eb9354aef8a3f1db7f26d94e43b31e80bbba2665a5d8575f37d6588984207147f2e0a08b7ffcc6b087312c898b7734cd940ed8bf9cb8a2351ad3c4336ab2275b938c085a5d7778fdc404c5ef0bc389f50de7243141249bde9a997407604a7390521b0e127ab05e44781c3ce082e2391aa2769ee6912fbc940f90d3c628f265fff3252b8da3ab3fbc822b8c00364fd0b2effd6ece5a7e23ddf1663d4c13e549eeca8bf72242d1f26ac22ea74cd7397bde0433666dc4cdb7534b2edb39128734e", 0x1}, {0xffffffff, 0x89, &(0x7f0000000840)="d36686a44b4ad7af7296e02f5486cdf5c03ce26b6744da07c3ad535dc8fd87a023253a6094192367daa12834f24413c852ecd9bcbf7c609dee146da033388901739e4ae81aa3f2712bddb97c7c34511d5da4f597f0731a951c87d70a1ae7f64f67064b86e2f6834c633073f79c5c214a5f0da1e5d235d4fb288b7c0751f494d3588fed248e31ab9e22", 0x1}, {0x44, 0x12, &(0x7f0000000900)="885a1a90fe6837b083fe08f1ecc55f77a815", 0x1}, {0x0, 0x7a, &(0x7f0000000940)="f82df795ea417ed5787725b37c1040d83e31a2c8cfcd4164f4e01fb234451b26c94faa9fe04d5e166b2e9d625ea8af75a060d7f069870170d5e4e61c718bf4d129ebf8c3902a80eb262af0dce91f4a0dfe037928b7649f0fc874bac25b7cfdb284eff07b6247bdf138a78d33c7f1fe45fc8eda30c8b0d75e584e", 0x1, 0x24ae4cde3b6fc0c4}, {0xffff, 0xe0, &(0x7f00000009c0)="fdf049c286c6617748fe31d101f700cd1ad02ef29a37cd6f816429cc90946b81e908758d85d863e94e0f8531ddc324c2daf60a46fb3a6c048d395f290dd1135c3e33ac7cbe3341224e08a37f7863ace89e0bb7ce87d0a1b5a7fef4237fe104d69473d1abca622e102d723f6882ca73f960d72710608861a63fccfcdcbb7918b27ce7a3e5e933f0b165b71a8f19f66455b771116ccc79788e10140ce4e08b22de89b6f2ab4ac360ce715a8107f863fbb2af613066d6d3064a8840ded39afc3916def358d41b1b31291d4a7b6b6433e7ef4da89cec8447182c0250159d0b824ca7"}, {0x9, 0x75, &(0x7f0000000ac0)="dc17e4c978a895649602ddd21197a5fcb2d48c002528b04d3c2c9525de472c5fc24b8f19cf2b99517b34eb4aae84d51c4bceb040b1b05e462105c230bd479533d46f7344965cd355835f030c734ae6c6f6e78b9c7b1e3e38404d35567a121be98a31b04a52a14cb0f6bd4295ed528b991b551d147b", 0x1, 0x1}]}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000c80)=0x61c3923) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000d00)={[0x9d]}, 0x8, 0x80000) r7 = syz_open_dev$hidraw(&(0x7f0000001200), 0x3, 0x80) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r9 = pidfd_open(0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000001980)={&(0x7f0000000cc0)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000000d40)={0x464, 0x37, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x263, 0x22, 0x0, 0x1, [@generic="3f4dc5dbc1c90621de7f0fe950c012270a467ba4d1e5bb6a31cdc8fbcbe3768d31694f134828be078cfa40ddaa0ca2c9b9ddc4c279bbf5d21e570100626b59bf64b24485a2fc1078fd4b9de00bb5472820570a04f6d9cd3c989815d297baa871b11d8177272558b508c71786ec3c6c02ee75a6507ead13021324e5e4bf89729b2ead11cb10f53d920505866b7cfca70c875b1951123a34d52421441e", @generic, @generic="1cba0368c8d087c654386a2ea094152812116d0540c6be548399e970ed436d5f6a192ba3233d18831f8074e4a268a9d1b4289ba78dfd649a8a6f3a28b666d7465919c137e464767bb2c14d8b48878422de770017ccad741da2ca333f0e2f714381c72d0cd111fdb54a779a36a3f94809aff4ebef3b4589604a82e3b19739376bcfdc4a10b2b846ed46e1ae48cb1a721b9d3fc5addfd997a5f1a532627db33686573c5089d001b6fee223deec224c6bae75a55313569180f5af9993bb16788ff72b114f7f1aac0f32944ee875ad0146cc38b2a04470d4216dfafe753ae509ee72bdbf7c81fe289f", @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x100000000}, @typed={0x4, 0x7b}, @generic="b4c59cdb9f524a29229da2b3806fdb5b616bd24b588ff4b97bfe3cfe54142ca71bd7e42b9071fbd7a4d4a51086a74e17b2f7806006e37298dde9d434199cba95041f390e39f8e848bad362bcffa3854058c49d12a846118d52efd50ebb08726322f80bd4d997423f42e258e4287987505d2099f5de93f5895030c5a9f96503cfa28418b5f092a8aa043a655cfdbc106d63066a29c28454058961993189376e5a35341090df0059a5e220be0a9bfdf70be94b79d82e5f325f"]}, @nested={0x195, 0x35, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @generic="46ec664b6ea7de4fd7146e75db3586ed42d4b722f410bac8e982c05fdcbcc5514bb47f916419ee677059b7d48c9bc6025a5550664e617d3ff92949d591fb9246bcc1ca8a0f17e83abed4997112132df311e64687a1fa5cc373bca72269d58b2833cdd52b47a97e7048bd931c2bb4f6fbc0893656af00618793954414c0f9a61929b1fde9b06cb4d49c4cb72c1e3e11d552a421fa7cd07c17a2ba8023d2b6d9757ee6242ac8e17f60bcb4a15cbaf8ffd16a49257526a99fbe955a13c2b1f1de1a8b8ee7e60eaac32f39c0badda8fe7975fb08d5a62eba38e3a1c0067e0888cb3b243ef085bf4b730a1a62c4fdf6c03176bc31a2c3b6b6dd", @generic="50eea86a10fe8dd2be406710a93116f8dfdce08155fcc47f9f0690de7c00bdd112e3afc03e755f", @typed={0x4, 0x10}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@mcast1}, @generic="717f4b992df761cc41f519d824fc35e00a19b35627e521467362f511df5b5ab52d424056c0f99e130ff14c8b732edcb43cb186a91551bba04c87d6a6b232fa149d63fecbd845b224073feb"]}, @generic="4c0163643435a23029c5fc27e5096c40db9081efb525dcb3686b8d8a3c327d8aaa6b20a61d7364fbb2e90de7d4df265298d949a2ab936ff25601f3d337feb4076f366ccb5d251853b066f92e3f1ef56ed875d13f50999252"]}, 0x464}], 0x1, &(0x7f0000001800)=[@rights={{0x34, 0x1, 0x1, [r7, r8, r4, r9, r1, r5, r4, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x160, 0x4040000}, 0x4040000) 22:15:19 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7f, 0x3, 0x0, 0x401, 0x3, 0x3e, 0x3, 0x137, 0x40, 0x142, 0x100, 0xb1c, 0x38, 0x2, 0x6, 0x4}, [{0xd14842ef725539aa, 0x4, 0x9, 0x4, 0x3, 0xee52, 0x7}, {0x5, 0x400, 0x3, 0xfffffffffffffffa, 0x3, 0x2, 0xffffffff}], "7cbc0e38d8ef7c7eca87dd20b3840d02f698471fce44316fcdd32dbe7a6e2363c80d9517095cb8c605454100b4aa2aed0190c0ecf80c39ac4f813ab9405c9a9cc29351f31b28f1104e6e1168a327248fe69ad2b62846c8ffc0769f22e5295a47cd41c1300f59e2e611b31960a095e5c47887872e14f37c8c366b4be5f705eaf427e0fd3965d87d2d46d63282db2b699b0010c9570f6eea6bb5fa422c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000a00)='blkio.bfq.sectors\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x121080, 0x0) linkat(r2, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000ac0)='./file0\x00', 0xc00) renameat(r1, &(0x7f0000000b00)='./file0\x00', r2, &(0x7f0000000b40)='./file0\x00') getpeername(r0, &(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000c80)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000cc0)={0xffffffff, 0x800, 0x3f}) unlinkat(r2, &(0x7f0000000d00)='./file0\x00', 0x0) preadv2(r2, &(0x7f0000001e80)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/75, 0x4b}], 0x3, 0x8, 0x4, 0x2465f65dd4263738) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004094}, 0x4000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000020c0)=0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000002100)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r6, r3) r7 = accept4$inet6(r1, &(0x7f0000002140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002180)=0x1c, 0x80000) fcntl$notify(r7, 0x402, 0x0) 22:15:19 executing program 3: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x64000) r3 = syz_io_uring_setup(0x3a99, &(0x7f0000000180)={0x0, 0x7531, 0x10, 0x0, 0x104, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = memfd_create(&(0x7f0000000280)='trusted.overlay.redirect\x00', 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[r4], 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) ftruncate(r2, 0x20) sendmsg$sock(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3acf20ae9a517396bbb11123c340b4e3996d2b384cceb33addb477d02cde22f520192310a66da4f7e6e160ecf06639bc2a037ac69a7a2534babdc40871f1b4fd7aa1c74bed9e127564e0b715ab14ec2b1a29c505cc7bdb81f2d043753b84", 0x5e}, {&(0x7f0000000500)="a7b79ab59804b8eac4bfc45745ae342b8a84c22674005db6f7efb91d2b2dd05d6d7f5f8902402e6e727bf3c0e600a0d67d5ccc5a064f5255d62b1f825ea57a73f00e57b14cdb12771c147a9c3badb4cb7ead80c38c0bcc361c9b9b77147f9a06a86e7f9dabf3d51078005c04f7b6a92beca06b4cf006c92f47c4985a4f2d5c8ab3cdd612cd225db15c", 0x89}, {&(0x7f00000005c0)="15c7142222088209936229620e62cddf00021f921bb56da2bfccb2718117c364f6fbe818d695d70d83b3c8dce8f6a3290333eefdbb0004aa347cea1103e54f658c2ae3644d1aecd186b24d6b2d2065c1de380d8682f38df939de64d2f6727b1bd8f2cc0ccb040f28de9e044ea415f501d623bf986ffc560c4f1e8edb407ffd7ef9d420161443ee2ad09fe3565ccdd26859c0fa450998e130fb5ec30f36b251f469fdc8cce3caecb12f7cd8038dd9aab2bf33e1a70c856e6d1b3b0d32fb32ec223425c7dda5816a", 0xc7}, {&(0x7f00000006c0)="4e0cde3d7c067004177f4cb84a46bfee8be9311156381ba741f4a1a4d3235e11c94bf0ceeb3f292c8dea9c627a244213e7afff790a0e78c38a9cfe09dba8a81b81e777da02ee17e256f0548975b8ecf4317ece025ce712e29e49fa5ec72a93f8e52548191316da6e26c8dfb8204ab391f58f91f2b985eab04bcae1b74b35364917beabc5ff7be9c0f29b6c90186d3238c314e016cb771666b8b65c278afa3c80a1e7c3fd6144f3362c9b2c7a9e609c7459b660c8d836b6b9bc2dc4a84924c089fc435211acdca0eef53a3a24ea5ccec786c5b749be39a115eafebfd0335b552f1880d33e2443", 0xe6}], 0x4, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xf0}, 0x40) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) syz_io_uring_setup(0x4d78, &(0x7f0000000940)={0x0, 0xf36d, 0x1, 0x1, 0x2a6, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000a40)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x51}}, 0x3) sendfile(r3, r3, &(0x7f0000000a80)=0x80000001, 0x9226) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8014) 22:15:19 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x7, 0xde69) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8081}, 0x50) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000024c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000000240)={0x2238, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_TESTDATA={0x5a, 0x45, "921b8f4dad6f2e5ae75f773ad1b60530fbbe3d203db8bb0e9e99bf12fa0396fc9f62806877eb668fcd3a35deb834d942e23e3a6e396f7ec331f2192ec9bc32892c18587fd1e6813f9e318f23b8f15d3dd66e45b1eba5"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x70, 0x45, "5d1085271ac8e2625bee7cf624641ad6686dde1c3ab311a2df3fe0ac78c5574fe864e69b0e0dad2064a92078a0c168b3c72a2f45ed47cd86b8a950beca012695f41ddffdf75fcd3592b1d8c45ba91cc43349b969ac6d1ef66d406e5a03a2e20e3d633ae728868cec46007bde"}, @NL80211_ATTR_TESTDATA={0xa9, 0x45, "22a98b3cc37d37c8acd4477f31c7fd1e47fe5271a9b9e455a5b7a87cc0a4aba7337fc30222cc61cf1d77f3325aec0e439994bd75ccbd02ce2347aa8c91039a4a70a8eb75c1a8bd506a4e700c69a000f5be3b53fb528ef0ace8d61f499e5ad48f162f3629d13c00416ed60d85241b735ff456d5a782763cb8a107cf1f6731c672f8558a7e06d5926e1b9becc3f31646d1db9f1d3f17e5a7bbfca15f051eb58f7bfaa4ff02f4"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x8f, 0x45, "d7617bce800a9f7e25bd72c8b17a5ef45e6633948fd78d49868ce6d441bbf16c78dedaee8e6001171497c2bd46f243b01efb61eff745e7a232ed9fa9a7c12d5ebe3e824d812d142cd9e6199a7a8b92b16ab889aed99284c939ca53a90469f60744e5ff05b82d5967343800b48e74160909a000f8c39e914ca4649bef20ceb495429c5464c111161cf66be8"}]}, 0x2238}, 0x1, 0x0, 0x0, 0x20048004}, 0x4008000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) vmsplice(r1, &(0x7f0000002500), 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002540)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000025c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcae8}}, './file0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000026c0)={0xfffffffffffffffc, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x74, 0x1, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9b}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfa2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) perf_event_open(&(0x7f0000002740)={0x1, 0x80, 0x7f, 0x1f, 0x0, 0x2, 0x0, 0x2000200000000, 0x40008, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3dd, 0x4, @perf_bp={&(0x7f0000002700), 0xc}, 0x1046, 0x2, 0x5, 0x2, 0x4, 0x7, 0x8, 0x0, 0x81, 0x0, 0x3}, r2, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000027c0), 0x4a4a80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000044) r5 = openat$cgroup_procs(r0, &(0x7f0000002940)='tasks\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000002980)={{0x1, 0x1, 0x18, r5, {0x6fe}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xacd2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40085) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000890}, 0x8040) r6 = memfd_secret(0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002c40)) 22:15:19 executing program 7: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x6, 0x5, 0xffffffff, 0x2, 0x3e, 0x1, 0x13f, 0x38, 0x2cf, 0x0, 0xffc1, 0x20, 0x1, 0x4, 0x1, 0x3}, [{0x7, 0x1, 0x0, 0x1f, 0x1ff, 0x7, 0x1bb, 0x72}, {0x70000000, 0x0, 0x4, 0x9, 0x8000, 0x62f, 0xfffffffb, 0x1}], "67e7e63b53e2bdb24a9ccb2c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa84) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000ac0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0x20041, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000b40)=0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000b80)={0x0, 0x9, 0x7ff, 0x1000, 0x8}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000c00)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = accept4$inet(r4, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x1800) pwritev2(r6, &(0x7f0000000e00)=[{&(0x7f0000000d80)="4834b518f88f2dcd2d5d3477f6b21bcf1cd1b16b8107c1bd66bf9800ad63c3c2c30cde93b0b3210dabaf242ad41558b2cc54e57fd9e0548273ce5f8f2d6c7d5fd3035011636e75e462859cb171e735f02022b61cb2957a0a3db88d9f8bb395904f424e2809eae20a7ad4432782f6eddfa53c88abe5", 0x75}], 0x1, 0xc23e, 0x5, 0x1) 22:15:19 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) syz_emit_vhci(&(0x7f00000007c0)=@HCI_VENDOR_PKT, 0x2) [ 74.617779] audit: type=1400 audit(1663625719.682:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:15:19 executing program 5: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x7f, 0x1, 0x2, 0xe7, 0xfd, 0x8}) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x7) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000a80)) r1 = inotify_init() ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000ac0)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x2000, 0x0) ioctl$CDROMPAUSE(r2, 0x5301) ioctl$CDROMRESUME(r0, 0x5302) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000b80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r0, &(0x7f0000000b40)={0x9}, r0, 0x1, 0x0, 0x1, {0x0, r4}}, 0x1f) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000bc0)={0xffff, 0x8}) socketpair(0x9, 0x2, 0x3f, &(0x7f0000000c00)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000e40)={{0x0, 0x302, 0x4, 0x9, 0x81, 0x2, 0x3ff, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffff8, 0x401, 0x8000, 0xbb}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000f00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000006e540)={0x8, [{r6}, {r7}, {0x0, r8}], 0x3, "e3d7211b721b43"}) [ 75.937146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.939089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.940524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.942131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.945391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.946448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.947564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.948645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.952353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.953189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.970720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.984497] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.986138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.987718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.989000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.991476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.992982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.994396] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.997470] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.998490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.999878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.001831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.003215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.004951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.006897] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.008722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.009030] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.011502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.011589] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.014588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.016207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.018300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.022001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.023757] Bluetooth: hci1: HCI_REQ-0x0c1a [ 76.026709] Bluetooth: hci0: HCI_REQ-0x0c1a [ 76.027585] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.031986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.033401] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.033611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.044237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.044295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.047641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.049931] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.052043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.059761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.060760] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.065401] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.067305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.077294] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.060407] Bluetooth: hci2: command 0x0409 tx timeout [ 78.060689] Bluetooth: hci0: command 0x0409 tx timeout [ 78.061473] Bluetooth: hci6: command 0x0409 tx timeout [ 78.062600] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 78.066042] Bluetooth: hci1: command 0x0409 tx timeout [ 78.068262] Bluetooth: hci3: command 0x0409 tx timeout [ 78.123899] Bluetooth: hci5: command 0x0409 tx timeout [ 78.124684] Bluetooth: hci4: command 0x0409 tx timeout [ 80.107735] Bluetooth: hci3: command 0x041b tx timeout [ 80.107875] Bluetooth: hci0: command 0x041b tx timeout [ 80.108716] Bluetooth: hci2: command 0x041b tx timeout [ 80.111127] Bluetooth: hci1: command 0x041b tx timeout [ 80.111582] Bluetooth: hci6: command 0x041b tx timeout [ 80.171779] Bluetooth: hci5: command 0x041b tx timeout [ 80.172277] Bluetooth: hci4: command 0x041b tx timeout [ 81.042399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.046017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.046734] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.049049] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.050783] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.051441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.072611] Bluetooth: hci7: HCI_REQ-0x0c1a [ 82.155744] Bluetooth: hci6: command 0x040f tx timeout [ 82.156265] Bluetooth: hci1: command 0x040f tx timeout [ 82.156783] Bluetooth: hci2: command 0x040f tx timeout [ 82.157229] Bluetooth: hci0: command 0x040f tx timeout [ 82.157698] Bluetooth: hci3: command 0x040f tx timeout [ 82.219704] Bluetooth: hci4: command 0x040f tx timeout [ 82.220606] Bluetooth: hci5: command 0x040f tx timeout [ 83.115693] Bluetooth: hci7: command 0x0409 tx timeout [ 84.203774] Bluetooth: hci3: command 0x0419 tx timeout [ 84.204252] Bluetooth: hci0: command 0x0419 tx timeout [ 84.205621] Bluetooth: hci2: command 0x0419 tx timeout [ 84.206408] Bluetooth: hci1: command 0x0419 tx timeout [ 84.207200] Bluetooth: hci6: command 0x0419 tx timeout [ 84.267787] Bluetooth: hci5: command 0x0419 tx timeout [ 84.268254] Bluetooth: hci4: command 0x0419 tx timeout [ 85.163758] Bluetooth: hci7: command 0x041b tx timeout [ 87.211700] Bluetooth: hci7: command 0x040f tx timeout [ 89.259729] Bluetooth: hci7: command 0x0419 tx timeout [ 131.832030] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 131.832546] Bluetooth: Wrong link type (-22) [ 131.839537] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 131.842680] Bluetooth: Wrong link type (-22) [ 131.850736] audit: type=1400 audit(1663625776.915:7): avc: denied { open } for pid=3827 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:16:16 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) syz_emit_vhci(&(0x7f00000007c0)=@HCI_VENDOR_PKT, 0x2) 22:16:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) syz_emit_vhci(&(0x7f00000007c0)=@HCI_VENDOR_PKT, 0x2) [ 131.967516] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 131.979498] Bluetooth: Wrong link type (-22) [ 131.980857] Bluetooth: hci6: link tx timeout [ 131.981463] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 131.982580] Bluetooth: hci6: link tx timeout [ 131.983087] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 132.026923] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 132.034021] Bluetooth: Wrong link type (-22) 22:16:17 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) syz_emit_vhci(&(0x7f00000007c0)=@HCI_VENDOR_PKT, 0x2) 22:16:17 executing program 7: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x6, 0x5, 0xffffffff, 0x2, 0x3e, 0x1, 0x13f, 0x38, 0x2cf, 0x0, 0xffc1, 0x20, 0x1, 0x4, 0x1, 0x3}, [{0x7, 0x1, 0x0, 0x1f, 0x1ff, 0x7, 0x1bb, 0x72}, {0x70000000, 0x0, 0x4, 0x9, 0x8000, 0x62f, 0xfffffffb, 0x1}], "67e7e63b53e2bdb24a9ccb2c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa84) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000ac0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0x20041, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000b40)=0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000b80)={0x0, 0x9, 0x7ff, 0x1000, 0x8}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000c00)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = accept4$inet(r4, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x1800) pwritev2(r6, &(0x7f0000000e00)=[{&(0x7f0000000d80)="4834b518f88f2dcd2d5d3477f6b21bcf1cd1b16b8107c1bd66bf9800ad63c3c2c30cde93b0b3210dabaf242ad41558b2cc54e57fd9e0548273ce5f8f2d6c7d5fd3035011636e75e462859cb171e735f02022b61cb2957a0a3db88d9f8bb395904f424e2809eae20a7ad4432782f6eddfa53c88abe5", 0x75}], 0x1, 0xc23e, 0x5, 0x1) [ 132.123603] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 132.125140] Bluetooth: Wrong link type (-22) [ 132.126302] Bluetooth: hci6: link tx timeout [ 132.126685] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 132.127202] Bluetooth: hci6: link tx timeout [ 132.127531] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa 22:16:17 executing program 4: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x6, 0x5, 0xffffffff, 0x2, 0x3e, 0x1, 0x13f, 0x38, 0x2cf, 0x0, 0xffc1, 0x20, 0x1, 0x4, 0x1, 0x3}, [{0x7, 0x1, 0x0, 0x1f, 0x1ff, 0x7, 0x1bb, 0x72}, {0x70000000, 0x0, 0x4, 0x9, 0x8000, 0x62f, 0xfffffffb, 0x1}], "67e7e63b53e2bdb24a9ccb2c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa84) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000ac0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0x20041, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000b40)=0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000b80)={0x0, 0x9, 0x7ff, 0x1000, 0x8}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000c00)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = accept4$inet(r4, &(0x7f0000000d00), &(0x7f0000000d40)=0x10, 0x1800) pwritev2(r6, &(0x7f0000000e00)=[{&(0x7f0000000d80)="4834b518f88f2dcd2d5d3477f6b21bcf1cd1b16b8107c1bd66bf9800ad63c3c2c30cde93b0b3210dabaf242ad41558b2cc54e57fd9e0548273ce5f8f2d6c7d5fd3035011636e75e462859cb171e735f02022b61cb2957a0a3db88d9f8bb395904f424e2809eae20a7ad4432782f6eddfa53c88abe5", 0x75}], 0x1, 0xc23e, 0x5, 0x1) 22:16:17 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) syz_emit_vhci(&(0x7f00000007c0)=@HCI_VENDOR_PKT, 0x2) [ 132.246116] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 132.248788] Bluetooth: Wrong link type (-22) [ 132.249814] Bluetooth: hci6: link tx timeout [ 132.250168] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 132.250726] Bluetooth: hci6: link tx timeout [ 132.251070] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 132.396166] audit: type=1400 audit(1663625777.461:8): avc: denied { map } for pid=3875 comm="syz-executor.3" path="pipe:[14644]" dev="pipefs" ino=14644 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 132.398012] audit: type=1400 audit(1663625777.461:9): avc: denied { execute } for pid=3875 comm="syz-executor.3" path="pipe:[14644]" dev="pipefs" ino=14644 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 133.995704] Bluetooth: hci6: command 0x0406 tx timeout 22:16:36 executing program 4: r0 = clone3(&(0x7f0000000080)={0xf6822d80, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(r0) r2 = getpid() perf_event_open(0x0, r2, 0xf, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r4 = getpid() perf_event_open(0x0, r4, 0xf, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/sit', 0x180, 0x2e) fremovexattr(r5, &(0x7f00000000c0)=@random={'user.', '@-^{\x0e!\x00'}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/sit', 0x180, 0x2e) fremovexattr(r6, &(0x7f00000000c0)=@random={'user.', '@-^{\x0e!\x00'}) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000100)=0x2433) fcntl$dupfd(r6, 0x406, r6) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f00000002c0)={0x1, @multicast2, 0x4e20, 0x4, 'dh\x00', 0x2e, 0x370, 0xc}, 0x2c) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000100)=0x2433) r7 = fcntl$dupfd(r5, 0x406, r5) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000140)={r7, 0x3, 0x6, 0xf83c}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000180)={r8, 0x10000, 0x0, 0x100}) clone3(&(0x7f0000000240)={0x1000100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x1a}, &(0x7f0000000140)=""/47, 0x2f, &(0x7f0000000180)=""/31, &(0x7f0000000200)=[r0, r1, r0, r2, r3, r4, r0], 0x7, {r7}}, 0x58) 22:16:36 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x2, 0x8, 0x3}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200140, 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r3, r2], 0x3) read(r1, &(0x7f0000000180)=""/4096, 0x1000) r4 = socket(0x3, 0x80000, 0x6) r5 = dup(r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e24, 0x1ff, @empty, 0x8}}, 0x0, 0x0, 0x25, 0x0, "7e710fc066615ca2b7e128ef94433c34e404772d337fbd33f37139b93b8cfef700cfb0ddf1b00efbe97d74d6d41509d64de2888279d44bbbd4ec4f4e757b3aa998f7adb37321a5ce4ff8e7f9989ace68"}, 0xd8) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000001280)=""/15, 0xf}, {&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/57, 0x39}, {&(0x7f00000014c0)=""/245, 0xf5}], 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) openat(r6, &(0x7f0000001680)='./file0\x00', 0x105080, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000016c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001700)=""/181) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000017c0)={0x1, 0x6, @status={[0xb2, 0x9c, 0xffffffffffffffff, 0x3, 0x2, 0x5]}, [0x8, 0x8, 0x8001, 0xfffffffeffffffff, 0x1ff, 0x20, 0x9, 0x6, 0x7, 0x2, 0x8001, 0x0, 0x3, 0x8001, 0x10000, 0xc9, 0x9, 0x6fd5, 0x5, 0x9, 0xffffffffffffffe1, 0x8000, 0x2d3d, 0x7, 0x4, 0x40, 0xa69, 0x6, 0xffffffff, 0x7fffffff, 0x800, 0x6, 0x7fff, 0x2, 0x3fe0000000, 0x3, 0x5, 0x1, 0x1, 0x3, 0x5, 0x9, 0x2, 0x3f, 0x8, 0x3, 0x3, 0xffffffff, 0x3f, 0x80000000, 0x4, 0x3, 0x0, 0x40, 0x9, 0x8, 0x3, 0x1, 0x101, 0x4, 0x3, 0x8001, 0x0, 0x2]}) openat$incfs(0xffffffffffffffff, &(0x7f0000002240)='.log\x00', 0x800, 0xc2) 22:16:36 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, 0x0, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\xb2AE\xdb&D\x9bK\xf3\xc9f\xe7\x99\x18\x13_\x15\x85\x8b.\xfd\xa87\xbc\x97\xdc\x80\x85\xd3\xf6\"\xd2\x98\xf4^\x99L\x13\xbe\xa9\xc2o\xb9\xbb~0`\xc2\xbeR\x05\xa0\x96\xa6q\xa3\xf6\xc0\xfd\xf3\x1d\xba\x94\xc3\xed\xe7Hm\xb5/\xef\x00\x92\x96sk\x80\r\xa0I\x16|\xc7)\x0eQ9U\x9e\xbas\x9a\xd6\x82\x95i\x14*\xdcO!\x97Fl,\x06]J\xf0\a\xeco\x1f\x04\x909\x88\xca}g\x930\xf4\xc9\t\xa9\xde\x01\x8c:\xab\xae\n\xad\x92\xbf\x1cC\x84C\x8fN\x15=\xf5M\xa9\x85y\xa6t\x04\x15/\xe6\r\xf9\xb4\xbaB\xd1L`\x9c\xfe\xe7\xd4Q\xee\x8b\x12O\xc3i*\x85x\bb\xac\xa0\xd5\xc7\x83\x13\xb8U', r0) 22:16:36 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7f, 0x3, 0x0, 0x401, 0x3, 0x3e, 0x3, 0x137, 0x40, 0x142, 0x100, 0xb1c, 0x38, 0x2, 0x6, 0x4}, [{0xd14842ef725539aa, 0x4, 0x9, 0x4, 0x3, 0xee52, 0x7}, {0x5, 0x400, 0x3, 0xfffffffffffffffa, 0x3, 0x2, 0xffffffff}], "7cbc0e38d8ef7c7eca87dd20b3840d02f698471fce44316fcdd32dbe7a6e2363c80d9517095cb8c605454100b4aa2aed0190c0ecf80c39ac4f813ab9405c9a9cc29351f31b28f1104e6e1168a327248fe69ad2b62846c8ffc0769f22e5295a47cd41c1300f59e2e611b31960a095e5c47887872e14f37c8c366b4be5f705eaf427e0fd3965d87d2d46d63282db2b699b0010c9570f6eea6bb5fa422c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000a00)='blkio.bfq.sectors\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x121080, 0x0) linkat(r2, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000ac0)='./file0\x00', 0xc00) renameat(r1, &(0x7f0000000b00)='./file0\x00', r2, &(0x7f0000000b40)='./file0\x00') getpeername(r0, &(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000c80)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000cc0)={0xffffffff, 0x800, 0x3f}) unlinkat(r2, &(0x7f0000000d00)='./file0\x00', 0x0) preadv2(r2, &(0x7f0000001e80)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/75, 0x4b}], 0x3, 0x8, 0x4, 0x2465f65dd4263738) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004094}, 0x4000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000020c0)=0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000002100)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r6, r3) r7 = accept4$inet6(r1, &(0x7f0000002140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002180)=0x1c, 0x80000) fcntl$notify(r7, 0x402, 0x0) [ 151.694871] audit: type=1400 audit(1663625796.760:10): avc: denied { kernel } for pid=3983 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 151.709945] ------------[ cut here ]------------ [ 151.709964] [ 151.709967] ====================================================== [ 151.709970] WARNING: possible circular locking dependency detected [ 151.709974] 6.0.0-rc6-next-20220919 #1 Not tainted [ 151.709980] ------------------------------------------------------ [ 151.709984] syz-executor.7/3984 is trying to acquire lock: [ 151.709990] ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 151.710028] [ 151.710028] but task is already holding lock: [ 151.710030] ffff8880175c6c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 151.710060] [ 151.710060] which lock already depends on the new lock. [ 151.710060] [ 151.710063] [ 151.710063] the existing dependency chain (in reverse order) is: [ 151.710066] [ 151.710066] -> #3 (&ctx->lock){....}-{2:2}: [ 151.710080] _raw_spin_lock+0x2a/0x40 [ 151.710097] __perf_event_task_sched_out+0x53b/0x18d0 [ 151.710110] __schedule+0xedd/0x2470 [ 151.710121] schedule+0xda/0x1b0 [ 151.710131] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.710151] syscall_exit_to_user_mode+0x19/0x40 [ 151.710169] do_syscall_64+0x48/0x90 [ 151.710182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.710200] [ 151.710200] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 151.710213] _raw_spin_lock_nested+0x30/0x40 [ 151.710228] raw_spin_rq_lock_nested+0x1e/0x30 [ 151.710241] task_fork_fair+0x63/0x4d0 [ 151.710257] sched_cgroup_fork+0x3d0/0x540 [ 151.710271] copy_process+0x4183/0x6e20 [ 151.710282] kernel_clone+0xe7/0x890 [ 151.710291] user_mode_thread+0xad/0xf0 [ 151.710301] rest_init+0x24/0x250 [ 151.710317] arch_call_rest_init+0xf/0x14 [ 151.710330] start_kernel+0x4c1/0x4e6 [ 151.710339] secondary_startup_64_no_verify+0xe0/0xeb [ 151.710354] [ 151.710354] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 151.710367] _raw_spin_lock_irqsave+0x39/0x60 [ 151.710382] try_to_wake_up+0xab/0x1920 [ 151.710397] up+0x75/0xb0 [ 151.710409] __up_console_sem+0x6e/0x80 [ 151.710424] console_unlock+0x46a/0x590 [ 151.710440] do_con_write+0xc05/0x1d50 [ 151.710452] con_write+0x21/0x40 [ 151.710461] n_tty_write+0x4d4/0xfe0 [ 151.710474] file_tty_write.constprop.0+0x49c/0x8f0 [ 151.710486] vfs_write+0x9c3/0xd90 [ 151.710504] ksys_write+0x127/0x250 [ 151.710520] do_syscall_64+0x3b/0x90 [ 151.710533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.710550] [ 151.710550] -> #0 ((console_sem).lock){....}-{2:2}: [ 151.710563] __lock_acquire+0x2a02/0x5e70 [ 151.710579] lock_acquire+0x1a2/0x530 [ 151.710594] _raw_spin_lock_irqsave+0x39/0x60 [ 151.710609] down_trylock+0xe/0x70 [ 151.710621] __down_trylock_console_sem+0x3b/0xd0 [ 151.710637] vprintk_emit+0x16b/0x560 [ 151.710653] vprintk+0x84/0xa0 [ 151.710668] _printk+0xba/0xf1 [ 151.710686] report_bug.cold+0x72/0xab [ 151.710698] handle_bug+0x3c/0x70 [ 151.710711] exc_invalid_op+0x14/0x50 [ 151.710724] asm_exc_invalid_op+0x16/0x20 [ 151.710740] group_sched_out.part.0+0x2c7/0x460 [ 151.710750] ctx_sched_out+0x8f1/0xc10 [ 151.710760] __perf_event_task_sched_out+0x6d0/0x18d0 [ 151.710772] __schedule+0xedd/0x2470 [ 151.710782] schedule+0xda/0x1b0 [ 151.710791] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.710809] syscall_exit_to_user_mode+0x19/0x40 [ 151.710826] do_syscall_64+0x48/0x90 [ 151.710838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.710855] [ 151.710855] other info that might help us debug this: [ 151.710855] [ 151.710858] Chain exists of: [ 151.710858] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 151.710858] [ 151.710873] Possible unsafe locking scenario: [ 151.710873] [ 151.710875] CPU0 CPU1 [ 151.710877] ---- ---- [ 151.710879] lock(&ctx->lock); [ 151.710885] lock(&rq->__lock); [ 151.710891] lock(&ctx->lock); [ 151.710897] lock((console_sem).lock); [ 151.710903] [ 151.710903] *** DEADLOCK *** [ 151.710903] [ 151.710905] 2 locks held by syz-executor.7/3984: [ 151.710912] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 151.710938] #1: ffff8880175c6c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 151.710965] [ 151.710965] stack backtrace: [ 151.710968] CPU: 1 PID: 3984 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220919 #1 [ 151.710981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 151.710989] Call Trace: [ 151.710992] [ 151.710996] dump_stack_lvl+0x8b/0xb3 [ 151.711011] check_noncircular+0x263/0x2e0 [ 151.711027] ? format_decode+0x26c/0xb50 [ 151.711042] ? print_circular_bug+0x450/0x450 [ 151.711059] ? enable_ptr_key_workfn+0x20/0x20 [ 151.711074] ? format_decode+0x26c/0xb50 [ 151.711089] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 151.711107] __lock_acquire+0x2a02/0x5e70 [ 151.711128] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 151.711150] lock_acquire+0x1a2/0x530 [ 151.711166] ? down_trylock+0xe/0x70 [ 151.711180] ? lock_release+0x750/0x750 [ 151.711200] ? vprintk+0x84/0xa0 [ 151.711217] _raw_spin_lock_irqsave+0x39/0x60 [ 151.711233] ? down_trylock+0xe/0x70 [ 151.711246] down_trylock+0xe/0x70 [ 151.711259] ? vprintk+0x84/0xa0 [ 151.711276] __down_trylock_console_sem+0x3b/0xd0 [ 151.711292] vprintk_emit+0x16b/0x560 [ 151.711311] vprintk+0x84/0xa0 [ 151.711328] _printk+0xba/0xf1 [ 151.711345] ? record_print_text.cold+0x16/0x16 [ 151.711367] ? report_bug.cold+0x66/0xab [ 151.711381] ? group_sched_out.part.0+0x2c7/0x460 [ 151.711392] report_bug.cold+0x72/0xab [ 151.711407] handle_bug+0x3c/0x70 [ 151.711420] exc_invalid_op+0x14/0x50 [ 151.711435] asm_exc_invalid_op+0x16/0x20 [ 151.711452] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 151.711465] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 151.711476] RSP: 0018:ffff8880205c7c48 EFLAGS: 00010006 [ 151.711486] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 151.711493] RDX: ffff88800d93d040 RSI: ffffffff81566077 RDI: 0000000000000005 [ 151.711501] RBP: ffff88801a3e8000 R08: 0000000000000005 R09: 0000000000000001 [ 151.711509] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff8880175c6c00 [ 151.711517] R13: ffff88806cf3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 151.711528] ? group_sched_out.part.0+0x2c7/0x460 [ 151.711541] ? group_sched_out.part.0+0x2c7/0x460 [ 151.711554] ctx_sched_out+0x8f1/0xc10 [ 151.711566] __perf_event_task_sched_out+0x6d0/0x18d0 [ 151.711581] ? lock_is_held_type+0xd7/0x130 [ 151.711599] ? __perf_cgroup_move+0x160/0x160 [ 151.711611] ? set_next_entity+0x304/0x550 [ 151.711628] ? update_curr+0x267/0x740 [ 151.711646] ? lock_is_held_type+0xd7/0x130 [ 151.711664] __schedule+0xedd/0x2470 [ 151.711677] ? io_schedule_timeout+0x150/0x150 [ 151.711690] ? rcu_read_lock_sched_held+0x3e/0x80 [ 151.711710] schedule+0xda/0x1b0 [ 151.711721] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.711741] syscall_exit_to_user_mode+0x19/0x40 [ 151.711759] do_syscall_64+0x48/0x90 [ 151.711773] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.711790] RIP: 0033:0x7f30727ceb19 [ 151.711799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.711810] RSP: 002b:00007f306fd44218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.711821] RAX: 0000000000000001 RBX: 00007f30728e1f68 RCX: 00007f30727ceb19 [ 151.711828] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30728e1f6c [ 151.711836] RBP: 00007f30728e1f60 R08: 000000000000000e R09: 0000000000000000 [ 151.711843] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f30728e1f6c [ 151.711851] R13: 00007fff2df0bbaf R14: 00007f306fd44300 R15: 0000000000022000 [ 151.711863] [ 151.769554] WARNING: CPU: 1 PID: 3984 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 151.770244] Modules linked in: [ 151.770486] CPU: 1 PID: 3984 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220919 #1 [ 151.771090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 151.771920] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 151.772331] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 151.773678] RSP: 0018:ffff8880205c7c48 EFLAGS: 00010006 [ 151.774077] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 151.774610] RDX: ffff88800d93d040 RSI: ffffffff81566077 RDI: 0000000000000005 [ 151.775146] RBP: ffff88801a3e8000 R08: 0000000000000005 R09: 0000000000000001 [ 151.775679] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff8880175c6c00 [ 151.776227] R13: ffff88806cf3d140 R14: ffffffff8547c620 R15: 0000000000000002 [ 151.776763] FS: 00007f306fd44700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 151.777367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.777808] CR2: 00007fc20bbe4004 CR3: 000000001b4a6000 CR4: 0000000000350ee0 [ 151.778342] Call Trace: [ 151.778539] [ 151.778717] ctx_sched_out+0x8f1/0xc10 [ 151.779015] __perf_event_task_sched_out+0x6d0/0x18d0 [ 151.779408] ? lock_is_held_type+0xd7/0x130 [ 151.779738] ? __perf_cgroup_move+0x160/0x160 [ 151.780088] ? set_next_entity+0x304/0x550 [ 151.780416] ? update_curr+0x267/0x740 [ 151.780723] ? lock_is_held_type+0xd7/0x130 [ 151.781053] __schedule+0xedd/0x2470 [ 151.781337] ? io_schedule_timeout+0x150/0x150 [ 151.781688] ? rcu_read_lock_sched_held+0x3e/0x80 [ 151.782062] schedule+0xda/0x1b0 [ 151.782323] exit_to_user_mode_prepare+0x114/0x1a0 [ 151.782702] syscall_exit_to_user_mode+0x19/0x40 [ 151.783068] do_syscall_64+0x48/0x90 [ 151.783355] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.783758] RIP: 0033:0x7f30727ceb19 [ 151.784044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.785402] RSP: 002b:00007f306fd44218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.785967] RAX: 0000000000000001 RBX: 00007f30728e1f68 RCX: 00007f30727ceb19 [ 151.786496] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30728e1f6c [ 151.787020] RBP: 00007f30728e1f60 R08: 000000000000000e R09: 0000000000000000 [ 151.787557] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f30728e1f6c [ 151.788107] R13: 00007fff2df0bbaf R14: 00007f306fd44300 R15: 0000000000022000 [ 151.788645] [ 151.788822] irq event stamp: 564 [ 151.789081] hardirqs last enabled at (563): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 151.789786] hardirqs last disabled at (564): [] __schedule+0x1225/0x2470 [ 151.790410] softirqs last enabled at (554): [] __irq_exit_rcu+0x11b/0x180 [ 151.791052] softirqs last disabled at (507): [] __irq_exit_rcu+0x11b/0x180 [ 151.791695] ---[ end trace 0000000000000000 ]--- 22:16:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r2 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x0, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x0, 0x4, 0x2, 0x309, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000240)={0x302, @tick=0x8bfa, 0x40, {0x80, 0x2}, 0x7, 0x1, 0x2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0xcf, 0x0, 0x2, 0x5, 0x0, 0x7, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfff, 0x1}, 0x5, 0xffffffff00000001, 0xfffffffa, 0x6, 0xb33, 0x5, 0x4, 0x0, 0x40, 0x0, 0xfff}, r5, 0x10, r0, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r6, 0x0) close(r6) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x0, 0x375, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) 22:16:36 executing program 3: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x64000) r3 = syz_io_uring_setup(0x3a99, &(0x7f0000000180)={0x0, 0x7531, 0x10, 0x0, 0x104, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = memfd_create(&(0x7f0000000280)='trusted.overlay.redirect\x00', 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[r4], 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) ftruncate(r2, 0x20) sendmsg$sock(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3acf20ae9a517396bbb11123c340b4e3996d2b384cceb33addb477d02cde22f520192310a66da4f7e6e160ecf06639bc2a037ac69a7a2534babdc40871f1b4fd7aa1c74bed9e127564e0b715ab14ec2b1a29c505cc7bdb81f2d043753b84", 0x5e}, {&(0x7f0000000500)="a7b79ab59804b8eac4bfc45745ae342b8a84c22674005db6f7efb91d2b2dd05d6d7f5f8902402e6e727bf3c0e600a0d67d5ccc5a064f5255d62b1f825ea57a73f00e57b14cdb12771c147a9c3badb4cb7ead80c38c0bcc361c9b9b77147f9a06a86e7f9dabf3d51078005c04f7b6a92beca06b4cf006c92f47c4985a4f2d5c8ab3cdd612cd225db15c", 0x89}, {&(0x7f00000005c0)="15c7142222088209936229620e62cddf00021f921bb56da2bfccb2718117c364f6fbe818d695d70d83b3c8dce8f6a3290333eefdbb0004aa347cea1103e54f658c2ae3644d1aecd186b24d6b2d2065c1de380d8682f38df939de64d2f6727b1bd8f2cc0ccb040f28de9e044ea415f501d623bf986ffc560c4f1e8edb407ffd7ef9d420161443ee2ad09fe3565ccdd26859c0fa450998e130fb5ec30f36b251f469fdc8cce3caecb12f7cd8038dd9aab2bf33e1a70c856e6d1b3b0d32fb32ec223425c7dda5816a", 0xc7}, {&(0x7f00000006c0)="4e0cde3d7c067004177f4cb84a46bfee8be9311156381ba741f4a1a4d3235e11c94bf0ceeb3f292c8dea9c627a244213e7afff790a0e78c38a9cfe09dba8a81b81e777da02ee17e256f0548975b8ecf4317ece025ce712e29e49fa5ec72a93f8e52548191316da6e26c8dfb8204ab391f58f91f2b985eab04bcae1b74b35364917beabc5ff7be9c0f29b6c90186d3238c314e016cb771666b8b65c278afa3c80a1e7c3fd6144f3362c9b2c7a9e609c7459b660c8d836b6b9bc2dc4a84924c089fc435211acdca0eef53a3a24ea5ccec786c5b749be39a115eafebfd0335b552f1880d33e2443", 0xe6}], 0x4, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xf0}, 0x40) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) syz_io_uring_setup(0x4d78, &(0x7f0000000940)={0x0, 0xf36d, 0x1, 0x1, 0x2a6, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000a40)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x51}}, 0x3) sendfile(r3, r3, &(0x7f0000000a80)=0x80000001, 0x9226) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8014) 22:16:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) r4 = perf_event_open(&(0x7f0000000280)={0xc0962d6aad36fd80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES64, @ANYRESOCT, @ANYRES64=r5, @ANYRES32, @ANYRESOCT]) r10 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r10, 0x0) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) close(r10) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 22:16:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) [ 151.810140] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 151.817375] Bluetooth: Wrong link type (-22) [ 151.819180] Bluetooth: hci6: link tx timeout [ 151.819876] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 151.820905] Bluetooth: hci6: link tx timeout [ 151.821553] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa 22:16:36 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) 22:16:36 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7f, 0x3, 0x0, 0x401, 0x3, 0x3e, 0x3, 0x137, 0x40, 0x142, 0x100, 0xb1c, 0x38, 0x2, 0x6, 0x4}, [{0xd14842ef725539aa, 0x4, 0x9, 0x4, 0x3, 0xee52, 0x7}, {0x5, 0x400, 0x3, 0xfffffffffffffffa, 0x3, 0x2, 0xffffffff}], "7cbc0e38d8ef7c7eca87dd20b3840d02f698471fce44316fcdd32dbe7a6e2363c80d9517095cb8c605454100b4aa2aed0190c0ecf80c39ac4f813ab9405c9a9cc29351f31b28f1104e6e1168a327248fe69ad2b62846c8ffc0769f22e5295a47cd41c1300f59e2e611b31960a095e5c47887872e14f37c8c366b4be5f705eaf427e0fd3965d87d2d46d63282db2b699b0010c9570f6eea6bb5fa422c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000a00)='blkio.bfq.sectors\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x121080, 0x0) linkat(r2, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000ac0)='./file0\x00', 0xc00) renameat(r1, &(0x7f0000000b00)='./file0\x00', r2, &(0x7f0000000b40)='./file0\x00') getpeername(r0, &(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000c80)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000cc0)={0xffffffff, 0x800, 0x3f}) unlinkat(r2, &(0x7f0000000d00)='./file0\x00', 0x0) preadv2(r2, &(0x7f0000001e80)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/75, 0x4b}], 0x3, 0x8, 0x4, 0x2465f65dd4263738) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004094}, 0x4000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000020c0)=0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000002100)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r6, r3) r7 = accept4$inet6(r1, &(0x7f0000002140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002180)=0x1c, 0x80000) fcntl$notify(r7, 0x402, 0x0) [ 151.876816] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 151.878374] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 151.879366] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 151.880340] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 151.881414] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 151.883132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.883952] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.885162] Buffer I/O error on dev sr0, logical block 0, async page read [ 151.888844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.889637] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.890901] Buffer I/O error on dev sr0, logical block 1, async page read [ 151.892081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.892911] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.894258] Buffer I/O error on dev sr0, logical block 2, async page read [ 151.895448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.896302] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.897539] Buffer I/O error on dev sr0, logical block 3, async page read [ 151.901803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.902595] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.903827] Buffer I/O error on dev sr0, logical block 4, async page read [ 151.905119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.905945] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.907297] Buffer I/O error on dev sr0, logical block 5, async page read [ 151.908445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.909264] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.910437] Buffer I/O error on dev sr0, logical block 6, async page read [ 151.911703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 151.912494] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.913723] Buffer I/O error on dev sr0, logical block 7, async page read [ 152.132660] hrtimer: interrupt took 18004 ns 22:16:46 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x2, 0x8, 0x3}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200140, 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r3, r2], 0x3) read(r1, &(0x7f0000000180)=""/4096, 0x1000) r4 = socket(0x3, 0x80000, 0x6) r5 = dup(r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e24, 0x1ff, @empty, 0x8}}, 0x0, 0x0, 0x25, 0x0, "7e710fc066615ca2b7e128ef94433c34e404772d337fbd33f37139b93b8cfef700cfb0ddf1b00efbe97d74d6d41509d64de2888279d44bbbd4ec4f4e757b3aa998f7adb37321a5ce4ff8e7f9989ace68"}, 0xd8) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000001280)=""/15, 0xf}, {&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/57, 0x39}, {&(0x7f00000014c0)=""/245, 0xf5}], 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) openat(r6, &(0x7f0000001680)='./file0\x00', 0x105080, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000016c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001700)=""/181) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000017c0)={0x1, 0x6, @status={[0xb2, 0x9c, 0xffffffffffffffff, 0x3, 0x2, 0x5]}, [0x8, 0x8, 0x8001, 0xfffffffeffffffff, 0x1ff, 0x20, 0x9, 0x6, 0x7, 0x2, 0x8001, 0x0, 0x3, 0x8001, 0x10000, 0xc9, 0x9, 0x6fd5, 0x5, 0x9, 0xffffffffffffffe1, 0x8000, 0x2d3d, 0x7, 0x4, 0x40, 0xa69, 0x6, 0xffffffff, 0x7fffffff, 0x800, 0x6, 0x7fff, 0x2, 0x3fe0000000, 0x3, 0x5, 0x1, 0x1, 0x3, 0x5, 0x9, 0x2, 0x3f, 0x8, 0x3, 0x3, 0xffffffff, 0x3f, 0x80000000, 0x4, 0x3, 0x0, 0x40, 0x9, 0x8, 0x3, 0x1, 0x101, 0x4, 0x3, 0x8001, 0x0, 0x2]}) openat$incfs(0xffffffffffffffff, &(0x7f0000002240)='.log\x00', 0x800, 0xc2) 22:16:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="baa5f123572056aa8aeb62f4908e179287c8ff4928187080218ddda44638f9bbc8ed5a534f3b30ec747a8c2a773e2835b3dd9d0d1357f2c7e0a9a0ef3e47228d849a490f268aa80465bc2a4d4ac02584493f368d4fd80571f989061cc563e1909ea4c42f100d575890c7486389b9b27ae25034571c3fca614935f55c62b7dfaf8cf3ebc83472c7951e31b965c80e0200e035f134dd0e691f0a953ef11123aa9e0fd9aa2c4208f5", 0xa7}, {}], 0x2, 0x409e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/142) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x2) sendfile(r1, r1, 0x0, 0x100000) 22:16:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r2 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x0, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x0, 0x4, 0x2, 0x309, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000240)={0x302, @tick=0x8bfa, 0x40, {0x80, 0x2}, 0x7, 0x1, 0x2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0xcf, 0x0, 0x2, 0x5, 0x0, 0x7, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfff, 0x1}, 0x5, 0xffffffff00000001, 0xfffffffa, 0x6, 0xb33, 0x5, 0x4, 0x0, 0x40, 0x0, 0xfff}, r5, 0x10, r0, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r6, 0x0) close(r6) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x0, 0x375, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) 22:16:46 executing program 3: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x64000) r3 = syz_io_uring_setup(0x3a99, &(0x7f0000000180)={0x0, 0x7531, 0x10, 0x0, 0x104, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = memfd_create(&(0x7f0000000280)='trusted.overlay.redirect\x00', 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[r4], 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) ftruncate(r2, 0x20) sendmsg$sock(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3acf20ae9a517396bbb11123c340b4e3996d2b384cceb33addb477d02cde22f520192310a66da4f7e6e160ecf06639bc2a037ac69a7a2534babdc40871f1b4fd7aa1c74bed9e127564e0b715ab14ec2b1a29c505cc7bdb81f2d043753b84", 0x5e}, {&(0x7f0000000500)="a7b79ab59804b8eac4bfc45745ae342b8a84c22674005db6f7efb91d2b2dd05d6d7f5f8902402e6e727bf3c0e600a0d67d5ccc5a064f5255d62b1f825ea57a73f00e57b14cdb12771c147a9c3badb4cb7ead80c38c0bcc361c9b9b77147f9a06a86e7f9dabf3d51078005c04f7b6a92beca06b4cf006c92f47c4985a4f2d5c8ab3cdd612cd225db15c", 0x89}, {&(0x7f00000005c0)="15c7142222088209936229620e62cddf00021f921bb56da2bfccb2718117c364f6fbe818d695d70d83b3c8dce8f6a3290333eefdbb0004aa347cea1103e54f658c2ae3644d1aecd186b24d6b2d2065c1de380d8682f38df939de64d2f6727b1bd8f2cc0ccb040f28de9e044ea415f501d623bf986ffc560c4f1e8edb407ffd7ef9d420161443ee2ad09fe3565ccdd26859c0fa450998e130fb5ec30f36b251f469fdc8cce3caecb12f7cd8038dd9aab2bf33e1a70c856e6d1b3b0d32fb32ec223425c7dda5816a", 0xc7}, {&(0x7f00000006c0)="4e0cde3d7c067004177f4cb84a46bfee8be9311156381ba741f4a1a4d3235e11c94bf0ceeb3f292c8dea9c627a244213e7afff790a0e78c38a9cfe09dba8a81b81e777da02ee17e256f0548975b8ecf4317ece025ce712e29e49fa5ec72a93f8e52548191316da6e26c8dfb8204ab391f58f91f2b985eab04bcae1b74b35364917beabc5ff7be9c0f29b6c90186d3238c314e016cb771666b8b65c278afa3c80a1e7c3fd6144f3362c9b2c7a9e609c7459b660c8d836b6b9bc2dc4a84924c089fc435211acdca0eef53a3a24ea5ccec786c5b749be39a115eafebfd0335b552f1880d33e2443", 0xe6}], 0x4, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xf0}, 0x40) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) syz_io_uring_setup(0x4d78, &(0x7f0000000940)={0x0, 0xf36d, 0x1, 0x1, 0x2a6, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000a40)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x51}}, 0x3) sendfile(r3, r3, &(0x7f0000000a80)=0x80000001, 0x9226) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8014) 22:16:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 22:16:46 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7f, 0x3, 0x0, 0x401, 0x3, 0x3e, 0x3, 0x137, 0x40, 0x142, 0x100, 0xb1c, 0x38, 0x2, 0x6, 0x4}, [{0xd14842ef725539aa, 0x4, 0x9, 0x4, 0x3, 0xee52, 0x7}, {0x5, 0x400, 0x3, 0xfffffffffffffffa, 0x3, 0x2, 0xffffffff}], "7cbc0e38d8ef7c7eca87dd20b3840d02f698471fce44316fcdd32dbe7a6e2363c80d9517095cb8c605454100b4aa2aed0190c0ecf80c39ac4f813ab9405c9a9cc29351f31b28f1104e6e1168a327248fe69ad2b62846c8ffc0769f22e5295a47cd41c1300f59e2e611b31960a095e5c47887872e14f37c8c366b4be5f705eaf427e0fd3965d87d2d46d63282db2b699b0010c9570f6eea6bb5fa422c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000a00)='blkio.bfq.sectors\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x121080, 0x0) linkat(r2, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000ac0)='./file0\x00', 0xc00) renameat(r1, &(0x7f0000000b00)='./file0\x00', r2, &(0x7f0000000b40)='./file0\x00') getpeername(r0, &(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000c80)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000cc0)={0xffffffff, 0x800, 0x3f}) unlinkat(r2, &(0x7f0000000d00)='./file0\x00', 0x0) preadv2(r2, &(0x7f0000001e80)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/75, 0x4b}], 0x3, 0x8, 0x4, 0x2465f65dd4263738) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004094}, 0x4000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000020c0)=0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000002100)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r6, r3) r7 = accept4$inet6(r1, &(0x7f0000002140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002180)=0x1c, 0x80000) fcntl$notify(r7, 0x402, 0x0) 22:16:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) 22:16:46 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'erspan0\x00', @ifru_map}}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x321000, 0xd4) set_mempolicy(0x5, &(0x7f0000000000)=0x9, 0x5) write(r0, &(0x7f0000000080)="01", 0x41030) set_mempolicy(0x3, &(0x7f00000000c0)=0x8, 0xff66) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x83000, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x28021, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,access=any,cache=mmap,version=9p2000,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6d6d61702cff657273696f6e3d3970323030302c6c6f6f73652c6c6f6f73652c66736e616d653d2e2c6673636f6e746578740180000066665f752c736d61636b6673726f6f743d2e2c00"]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000080)=""/142) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000800)=""/152) ioctl$FICLONE(r4, 0x40049409, r5) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000ef1000e7820000000000000000fc01000000000000000000000000000000000000000000000c0015000000000000000000"], 0x34}}, 0x0) recvmsg(r3, &(0x7f00000005c0)={&(0x7f0000000240)=@l2tp6, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/86, 0x56}], 0x3, &(0x7f00000004c0)=""/234, 0xea}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r6, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) [ 161.474061] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 161.474335] Bluetooth: Wrong link type (-22) [ 161.475809] Bluetooth: hci6: link tx timeout [ 161.476226] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 161.476834] Bluetooth: hci6: link tx timeout [ 161.477220] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa 22:16:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 161.500557] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 161.504062] Bluetooth: Wrong link type (-22) [ 161.566195] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 161.566582] Bluetooth: Wrong link type (-22) [ 161.567799] Bluetooth: hci6: link tx timeout [ 161.568186] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 161.568756] Bluetooth: hci6: link tx timeout [ 161.569120] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa 22:16:46 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x2, 0x8, 0x3}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200140, 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r3, r2], 0x3) read(r1, &(0x7f0000000180)=""/4096, 0x1000) r4 = socket(0x3, 0x80000, 0x6) r5 = dup(r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e24, 0x1ff, @empty, 0x8}}, 0x0, 0x0, 0x25, 0x0, "7e710fc066615ca2b7e128ef94433c34e404772d337fbd33f37139b93b8cfef700cfb0ddf1b00efbe97d74d6d41509d64de2888279d44bbbd4ec4f4e757b3aa998f7adb37321a5ce4ff8e7f9989ace68"}, 0xd8) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000001280)=""/15, 0xf}, {&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/57, 0x39}, {&(0x7f00000014c0)=""/245, 0xf5}], 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) openat(r6, &(0x7f0000001680)='./file0\x00', 0x105080, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000016c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001700)=""/181) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000017c0)={0x1, 0x6, @status={[0xb2, 0x9c, 0xffffffffffffffff, 0x3, 0x2, 0x5]}, [0x8, 0x8, 0x8001, 0xfffffffeffffffff, 0x1ff, 0x20, 0x9, 0x6, 0x7, 0x2, 0x8001, 0x0, 0x3, 0x8001, 0x10000, 0xc9, 0x9, 0x6fd5, 0x5, 0x9, 0xffffffffffffffe1, 0x8000, 0x2d3d, 0x7, 0x4, 0x40, 0xa69, 0x6, 0xffffffff, 0x7fffffff, 0x800, 0x6, 0x7fff, 0x2, 0x3fe0000000, 0x3, 0x5, 0x1, 0x1, 0x3, 0x5, 0x9, 0x2, 0x3f, 0x8, 0x3, 0x3, 0xffffffff, 0x3f, 0x80000000, 0x4, 0x3, 0x0, 0x40, 0x9, 0x8, 0x3, 0x1, 0x101, 0x4, 0x3, 0x8001, 0x0, 0x2]}) openat$incfs(0xffffffffffffffff, &(0x7f0000002240)='.log\x00', 0x800, 0xc2) 22:16:46 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7f, 0x3, 0x0, 0x401, 0x3, 0x3e, 0x3, 0x137, 0x40, 0x142, 0x100, 0xb1c, 0x38, 0x2, 0x6, 0x4}, [{0xd14842ef725539aa, 0x4, 0x9, 0x4, 0x3, 0xee52, 0x7}, {0x5, 0x400, 0x3, 0xfffffffffffffffa, 0x3, 0x2, 0xffffffff}], "7cbc0e38d8ef7c7eca87dd20b3840d02f698471fce44316fcdd32dbe7a6e2363c80d9517095cb8c605454100b4aa2aed0190c0ecf80c39ac4f813ab9405c9a9cc29351f31b28f1104e6e1168a327248fe69ad2b62846c8ffc0769f22e5295a47cd41c1300f59e2e611b31960a095e5c47887872e14f37c8c366b4be5f705eaf427e0fd3965d87d2d46d63282db2b699b0010c9570f6eea6bb5fa422c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000a00)='blkio.bfq.sectors\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x121080, 0x0) linkat(r2, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000ac0)='./file0\x00', 0xc00) renameat(r1, &(0x7f0000000b00)='./file0\x00', r2, &(0x7f0000000b40)='./file0\x00') getpeername(r0, &(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000c80)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000cc0)={0xffffffff, 0x800, 0x3f}) unlinkat(r2, &(0x7f0000000d00)='./file0\x00', 0x0) preadv2(r2, &(0x7f0000001e80)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f0000001e00)=""/75, 0x4b}], 0x3, 0x8, 0x4, 0x2465f65dd4263738) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004094}, 0x4000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000020c0)=0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000002100)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r6, r3) accept4$inet6(r1, &(0x7f0000002140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002180)=0x1c, 0x80000) 22:16:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "3aa359ef58a93892a8b540c6909805f4766b7c4eda99583f2fcbdbf5e16cf8d897ddef56cf720dbcba41637b56fca074dbac2a3334fa8663a332f4e2e831e25e979dd7c0e59aa3fbe2d3118ed34505f0f850fec7dced01d0faf6a8da785537a629045478e7a2b106fc5508e06f2d06a5b8c2f2b1efd463271af45d710dc9e2f3fecfb25f969ed946023df08dc4ae81f4546d214927d623ba969ab6b2"}, 0xa0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa6}, "00eec490a4f0f0103cd9591f968f519d001e2ee97fc1ac23c7b0d75f9e60ebc1902bbf02e2b2c08e8a1a0903cacc833fe062299fe929e7bc8d21f257be364e3e7ed11ee7af388469b16107fb028a8a95d44afcde48d936bd9b2f999a5d0096a0746a16ae2b7b64b4e83f32e22c10a95e825d15220db853a9f770db24595a14bbf60b7f5825875b82259daba01946aebaf56415a16b63357bbf0babbd8b64a0dd198c4b427f63"}, 0xaa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x45, 0x8}, {0x3, 0x3, 0x7, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@none, 0x34, 0x3, 0x81, "b9969e", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x9, 0x5, "e873f5", 0x1f}, {@any, 0x6, 0x9, 0x20, "3ce3db", 0x400}, {@none, 0x80, 0x7f, 0x8, "8ab7f5", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x9, 0x5, "f24607", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x0, 0x5, "1dd891", 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x20, 0x1, "9beeb0", 0xfffd}]}}}, 0x66) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x20, 0xe}, {0x7ff, 0x6, 0x400, 0x7ff, [0xfff7, 0x3, 0x8]}}}}, 0x1b) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x81, 0xc8, 0xc8, 0x9}}}, 0x8) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "9a62ca795960914c6c781559aeec8ee5964bf96b202e8090f0a88a5c313849b87d24c41a92b4b9e2336dd393b668320795788b3d7c88b6e6e1899bf3ce6461b63ceab8c332e46f22c9d498ecd841c6749585c6c028101e72a50796bd612f3ca4"}, 0x64) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdb}, "89c57e205c6e555cfb20b74d64b704980943cdaf40dbf4322fed870dedd1ab7603577fb43bf2175265305d0c57317bab4e2c232faf8c60c25fd1c06a81d51a8019581751cb5615859e585ddd4a58b6f748e84a102f1992974f2cfb066df49f0dce38c93798765c9455895a9593b1f3106445c48230a8701a2de5abd22888e3b2de092c7f21b0eb162d9a74af423003a30e9be7db388862c97d1c8a24e2d08550ea7b3e5ca0c069839e00d6caad85abec6b9d1b3e6f3f4987469c104e6fb8914420b6990e2813150ff7fa01e5ba192e5e82e1f26520dc01a9f68b45"}, 0xdf) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x12, 0x8}}, @l2cap_conn_rsp={{0x3, 0xfa, 0x8}, {0xff, 0xe65e, 0xfffa, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x4, 0x100}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x1, 0x1}}, @l2cap_conf_rsp={{0x5, 0xff, 0x2a}, {0xfffb, 0x1, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0xaf, 0x0, 0x3, 0x89, 0x0, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x5, 0x7f, 0x8ed, 0x200}}]}}, @l2cap_conn_req={{0x2, 0x2c, 0x4}, {0x6, 0x92e2}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x1000, 0x9}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000600)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000640)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "e8f8d99333fd569a7349770a355a9de73875cc755ef06d4c5285993e7138f00dc8c993801f855765aad9dc74b2e2b1e15c571afd787bc0a36a6f43e67e1d4ee909699be4d6a1a7f37e94ff206ac38d36e88a8adea43992813de80533da1bd1d80b9c9c9b6492824c899008fbbaa6dd51f83ce1ac0423e936f6d15e6f27faf575e9aa27ac"}, 0x88) syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x2, 0xc8, 0x2}}}, 0x6) VM DIAGNOSIS: 22:16:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff842650f7 RDX=ffffed100d9e6fa1 RSI=0000000000000004 RDI=ffff88806cf37d00 RBP=ffff88806cf37d00 RSP=ffff88803b8b7a98 R8 =0000000000000000 R9 =ffff88806cf37d03 R10=ffffed100d9e6fa0 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e6fa0 R14=0000000000000001 R15=1ffff11007716f54 RIP=ffffffff84265174 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556b17400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000004 CR3=000000003c276000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b2e71 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff8880205c7698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b2e60 RIP=ffffffff822b2ec9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f306fd44700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc20bbe4004 CR3=000000001b4a6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f30728b57c0 00007f30728b57c8 YMM02=0000000000000000 0000000000000000 00007f30728b57e0 00007f30728b57c0 YMM03=0000000000000000 0000000000000000 00007f30728b57c8 00007f30728b57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000