Warning: Permanently added '[localhost]:44988' (ECDSA) to the list of known hosts.
2022/11/16 05:23:25 fuzzer started
2022/11/16 05:23:25 dialing manager at localhost:40097
syzkaller login: [   42.301269] cgroup: Unknown subsys name 'net'
[   42.391246] cgroup: Unknown subsys name 'rlimit'
2022/11/16 05:23:46 syscalls: 2217
2022/11/16 05:23:46 code coverage: enabled
2022/11/16 05:23:46 comparison tracing: enabled
2022/11/16 05:23:46 extra coverage: enabled
2022/11/16 05:23:46 setuid sandbox: enabled
2022/11/16 05:23:46 namespace sandbox: enabled
2022/11/16 05:23:46 Android sandbox: enabled
2022/11/16 05:23:46 fault injection: enabled
2022/11/16 05:23:46 leak checking: enabled
2022/11/16 05:23:46 net packet injection: enabled
2022/11/16 05:23:46 net device setup: enabled
2022/11/16 05:23:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/11/16 05:23:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/11/16 05:23:46 USB emulation: enabled
2022/11/16 05:23:46 hci packet injection: enabled
2022/11/16 05:23:46 wifi device emulation: enabled
2022/11/16 05:23:46 802.15.4 emulation: enabled
2022/11/16 05:23:46 fetching corpus: 50, signal 36002/37751 (executing program)
2022/11/16 05:23:46 fetching corpus: 100, signal 49551/52935 (executing program)
2022/11/16 05:23:46 fetching corpus: 150, signal 55498/60468 (executing program)
2022/11/16 05:23:46 fetching corpus: 200, signal 61047/67542 (executing program)
2022/11/16 05:23:46 fetching corpus: 250, signal 65913/73916 (executing program)
2022/11/16 05:23:46 fetching corpus: 300, signal 69889/79350 (executing program)
2022/11/16 05:23:47 fetching corpus: 350, signal 74261/85113 (executing program)
2022/11/16 05:23:47 fetching corpus: 400, signal 77198/89518 (executing program)
2022/11/16 05:23:47 fetching corpus: 450, signal 80932/94630 (executing program)
2022/11/16 05:23:47 fetching corpus: 500, signal 84148/99198 (executing program)
2022/11/16 05:23:47 fetching corpus: 550, signal 87330/103714 (executing program)
2022/11/16 05:23:47 fetching corpus: 600, signal 90057/107757 (executing program)
2022/11/16 05:23:47 fetching corpus: 650, signal 91667/110700 (executing program)
2022/11/16 05:23:47 fetching corpus: 700, signal 94457/114700 (executing program)
2022/11/16 05:23:48 fetching corpus: 750, signal 99031/120327 (executing program)
2022/11/16 05:23:48 fetching corpus: 800, signal 102078/124491 (executing program)
2022/11/16 05:23:48 fetching corpus: 850, signal 104111/127684 (executing program)
2022/11/16 05:23:48 fetching corpus: 900, signal 107875/132434 (executing program)
2022/11/16 05:23:48 fetching corpus: 950, signal 109419/135150 (executing program)
2022/11/16 05:23:48 fetching corpus: 1000, signal 111443/138329 (executing program)
2022/11/16 05:23:48 fetching corpus: 1050, signal 113265/141287 (executing program)
2022/11/16 05:23:48 fetching corpus: 1100, signal 115049/144190 (executing program)
2022/11/16 05:23:48 fetching corpus: 1150, signal 116874/147089 (executing program)
2022/11/16 05:23:49 fetching corpus: 1200, signal 118476/149795 (executing program)
2022/11/16 05:23:49 fetching corpus: 1250, signal 120337/152707 (executing program)
2022/11/16 05:23:49 fetching corpus: 1300, signal 122217/155589 (executing program)
2022/11/16 05:23:49 fetching corpus: 1350, signal 123590/158000 (executing program)
2022/11/16 05:23:49 fetching corpus: 1400, signal 124916/160397 (executing program)
2022/11/16 05:23:49 fetching corpus: 1450, signal 126702/163156 (executing program)
2022/11/16 05:23:49 fetching corpus: 1500, signal 128267/165680 (executing program)
2022/11/16 05:23:49 fetching corpus: 1550, signal 130566/168812 (executing program)
2022/11/16 05:23:49 fetching corpus: 1600, signal 131426/170745 (executing program)
2022/11/16 05:23:50 fetching corpus: 1650, signal 134044/174135 (executing program)
2022/11/16 05:23:50 fetching corpus: 1700, signal 136015/176936 (executing program)
2022/11/16 05:23:50 fetching corpus: 1750, signal 137091/179013 (executing program)
2022/11/16 05:23:50 fetching corpus: 1800, signal 138387/181221 (executing program)
2022/11/16 05:23:50 fetching corpus: 1850, signal 139986/183645 (executing program)
2022/11/16 05:23:50 fetching corpus: 1900, signal 141288/185796 (executing program)
2022/11/16 05:23:50 fetching corpus: 1950, signal 142667/188052 (executing program)
2022/11/16 05:23:50 fetching corpus: 2000, signal 144184/190380 (executing program)
2022/11/16 05:23:50 fetching corpus: 2050, signal 145383/192481 (executing program)
2022/11/16 05:23:51 fetching corpus: 2100, signal 146535/194549 (executing program)
2022/11/16 05:23:51 fetching corpus: 2150, signal 148341/197039 (executing program)
2022/11/16 05:23:51 fetching corpus: 2200, signal 149522/198996 (executing program)
2022/11/16 05:23:51 fetching corpus: 2250, signal 151188/201384 (executing program)
2022/11/16 05:23:51 fetching corpus: 2300, signal 152757/203713 (executing program)
2022/11/16 05:23:51 fetching corpus: 2350, signal 154050/205719 (executing program)
2022/11/16 05:23:51 fetching corpus: 2400, signal 154885/207459 (executing program)
2022/11/16 05:23:51 fetching corpus: 2450, signal 156275/209580 (executing program)
2022/11/16 05:23:51 fetching corpus: 2500, signal 157423/211500 (executing program)
2022/11/16 05:23:52 fetching corpus: 2550, signal 158463/213302 (executing program)
2022/11/16 05:23:52 fetching corpus: 2600, signal 159457/215052 (executing program)
2022/11/16 05:23:52 fetching corpus: 2650, signal 160043/216507 (executing program)
2022/11/16 05:23:52 fetching corpus: 2700, signal 161019/218217 (executing program)
2022/11/16 05:23:52 fetching corpus: 2750, signal 161786/219762 (executing program)
2022/11/16 05:23:52 fetching corpus: 2800, signal 163086/221674 (executing program)
2022/11/16 05:23:52 fetching corpus: 2850, signal 164533/223675 (executing program)
2022/11/16 05:23:52 fetching corpus: 2900, signal 165525/225413 (executing program)
2022/11/16 05:23:53 fetching corpus: 2950, signal 166822/227273 (executing program)
2022/11/16 05:23:53 fetching corpus: 3000, signal 167612/228808 (executing program)
2022/11/16 05:23:53 fetching corpus: 3050, signal 168432/230361 (executing program)
2022/11/16 05:23:53 fetching corpus: 3100, signal 169710/232213 (executing program)
2022/11/16 05:23:53 fetching corpus: 3150, signal 170761/233906 (executing program)
2022/11/16 05:23:53 fetching corpus: 3200, signal 171652/235463 (executing program)
2022/11/16 05:23:53 fetching corpus: 3250, signal 172736/237148 (executing program)
2022/11/16 05:23:53 fetching corpus: 3300, signal 173559/238612 (executing program)
2022/11/16 05:23:53 fetching corpus: 3350, signal 174440/240165 (executing program)
2022/11/16 05:23:54 fetching corpus: 3400, signal 175380/241700 (executing program)
2022/11/16 05:23:54 fetching corpus: 3450, signal 176161/243094 (executing program)
2022/11/16 05:23:54 fetching corpus: 3500, signal 176781/244449 (executing program)
2022/11/16 05:23:54 fetching corpus: 3550, signal 177281/245690 (executing program)
2022/11/16 05:23:54 fetching corpus: 3600, signal 178168/247164 (executing program)
2022/11/16 05:23:54 fetching corpus: 3650, signal 179177/248702 (executing program)
2022/11/16 05:23:54 fetching corpus: 3700, signal 180018/250113 (executing program)
2022/11/16 05:23:54 fetching corpus: 3750, signal 180699/251478 (executing program)
2022/11/16 05:23:55 fetching corpus: 3800, signal 181708/252955 (executing program)
2022/11/16 05:23:55 fetching corpus: 3850, signal 182310/254241 (executing program)
2022/11/16 05:23:55 fetching corpus: 3900, signal 182858/255526 (executing program)
2022/11/16 05:23:55 fetching corpus: 3950, signal 183409/256827 (executing program)
2022/11/16 05:23:55 fetching corpus: 4000, signal 184289/258211 (executing program)
2022/11/16 05:23:55 fetching corpus: 4050, signal 185129/259580 (executing program)
2022/11/16 05:23:55 fetching corpus: 4100, signal 185915/260925 (executing program)
2022/11/16 05:23:55 fetching corpus: 4150, signal 186454/262100 (executing program)
2022/11/16 05:23:55 fetching corpus: 4200, signal 187322/263420 (executing program)
2022/11/16 05:23:56 fetching corpus: 4250, signal 188037/264667 (executing program)
2022/11/16 05:23:56 fetching corpus: 4300, signal 188478/265759 (executing program)
2022/11/16 05:23:56 fetching corpus: 4350, signal 189374/267044 (executing program)
2022/11/16 05:23:56 fetching corpus: 4400, signal 190336/268407 (executing program)
2022/11/16 05:23:56 fetching corpus: 4450, signal 191007/269636 (executing program)
2022/11/16 05:23:56 fetching corpus: 4500, signal 191964/270997 (executing program)
2022/11/16 05:23:56 fetching corpus: 4550, signal 192693/272224 (executing program)
2022/11/16 05:23:57 fetching corpus: 4600, signal 193538/273457 (executing program)
2022/11/16 05:23:57 fetching corpus: 4650, signal 194272/274654 (executing program)
2022/11/16 05:23:57 fetching corpus: 4700, signal 194988/275833 (executing program)
2022/11/16 05:23:57 fetching corpus: 4750, signal 195725/277023 (executing program)
2022/11/16 05:23:57 fetching corpus: 4800, signal 196232/278064 (executing program)
2022/11/16 05:23:57 fetching corpus: 4850, signal 197633/279541 (executing program)
2022/11/16 05:23:57 fetching corpus: 4900, signal 198339/280699 (executing program)
2022/11/16 05:23:57 fetching corpus: 4950, signal 199178/281911 (executing program)
2022/11/16 05:23:58 fetching corpus: 5000, signal 199777/282922 (executing program)
2022/11/16 05:23:58 fetching corpus: 5050, signal 200550/284067 (executing program)
2022/11/16 05:23:58 fetching corpus: 5100, signal 201537/285241 (executing program)
2022/11/16 05:23:58 fetching corpus: 5150, signal 201938/286238 (executing program)
2022/11/16 05:23:58 fetching corpus: 5200, signal 202346/287232 (executing program)
2022/11/16 05:23:58 fetching corpus: 5250, signal 202862/288248 (executing program)
2022/11/16 05:23:58 fetching corpus: 5300, signal 203956/289482 (executing program)
2022/11/16 05:23:58 fetching corpus: 5350, signal 204401/290470 (executing program)
2022/11/16 05:23:58 fetching corpus: 5400, signal 204947/291449 (executing program)
2022/11/16 05:23:59 fetching corpus: 5450, signal 205792/292569 (executing program)
2022/11/16 05:23:59 fetching corpus: 5500, signal 206447/293612 (executing program)
2022/11/16 05:23:59 fetching corpus: 5550, signal 207035/294612 (executing program)
2022/11/16 05:23:59 fetching corpus: 5600, signal 207550/295597 (executing program)
2022/11/16 05:23:59 fetching corpus: 5650, signal 208378/296653 (executing program)
2022/11/16 05:23:59 fetching corpus: 5700, signal 208804/297559 (executing program)
2022/11/16 05:23:59 fetching corpus: 5750, signal 209402/298577 (executing program)
2022/11/16 05:23:59 fetching corpus: 5800, signal 210214/299646 (executing program)
2022/11/16 05:24:00 fetching corpus: 5850, signal 210778/300585 (executing program)
2022/11/16 05:24:00 fetching corpus: 5900, signal 211196/301557 (executing program)
2022/11/16 05:24:00 fetching corpus: 5950, signal 211770/302503 (executing program)
2022/11/16 05:24:00 fetching corpus: 6000, signal 212471/303483 (executing program)
2022/11/16 05:24:00 fetching corpus: 6050, signal 212852/304337 (executing program)
2022/11/16 05:24:00 fetching corpus: 6100, signal 213390/305219 (executing program)
2022/11/16 05:24:00 fetching corpus: 6150, signal 213845/306105 (executing program)
2022/11/16 05:24:00 fetching corpus: 6200, signal 214275/306958 (executing program)
2022/11/16 05:24:01 fetching corpus: 6250, signal 214605/307783 (executing program)
2022/11/16 05:24:01 fetching corpus: 6300, signal 215189/308712 (executing program)
2022/11/16 05:24:01 fetching corpus: 6350, signal 215712/309595 (executing program)
2022/11/16 05:24:01 fetching corpus: 6400, signal 216136/310423 (executing program)
2022/11/16 05:24:01 fetching corpus: 6450, signal 216504/311203 (executing program)
2022/11/16 05:24:01 fetching corpus: 6500, signal 217173/312090 (executing program)
2022/11/16 05:24:01 fetching corpus: 6550, signal 217950/313023 (executing program)
2022/11/16 05:24:01 fetching corpus: 6600, signal 218281/313800 (executing program)
2022/11/16 05:24:02 fetching corpus: 6650, signal 218930/314640 (executing program)
2022/11/16 05:24:02 fetching corpus: 6700, signal 219483/315480 (executing program)
2022/11/16 05:24:02 fetching corpus: 6750, signal 220021/316344 (executing program)
2022/11/16 05:24:02 fetching corpus: 6800, signal 220812/317212 (executing program)
2022/11/16 05:24:02 fetching corpus: 6850, signal 221293/318048 (executing program)
2022/11/16 05:24:02 fetching corpus: 6900, signal 221762/318859 (executing program)
2022/11/16 05:24:02 fetching corpus: 6950, signal 222274/319665 (executing program)
2022/11/16 05:24:02 fetching corpus: 7000, signal 222796/320461 (executing program)
2022/11/16 05:24:03 fetching corpus: 7050, signal 223550/321318 (executing program)
2022/11/16 05:24:03 fetching corpus: 7100, signal 224135/322112 (executing program)
2022/11/16 05:24:03 fetching corpus: 7150, signal 224826/322893 (executing program)
2022/11/16 05:24:03 fetching corpus: 7200, signal 225184/323669 (executing program)
2022/11/16 05:24:03 fetching corpus: 7250, signal 225630/324424 (executing program)
2022/11/16 05:24:03 fetching corpus: 7300, signal 226113/325202 (executing program)
2022/11/16 05:24:03 fetching corpus: 7350, signal 226521/325947 (executing program)
2022/11/16 05:24:03 fetching corpus: 7400, signal 226854/326684 (executing program)
2022/11/16 05:24:03 fetching corpus: 7450, signal 227205/327407 (executing program)
2022/11/16 05:24:04 fetching corpus: 7500, signal 227641/328134 (executing program)
2022/11/16 05:24:04 fetching corpus: 7550, signal 228278/328886 (executing program)
2022/11/16 05:24:04 fetching corpus: 7600, signal 228599/329586 (executing program)
2022/11/16 05:24:04 fetching corpus: 7650, signal 229118/330310 (executing program)
2022/11/16 05:24:04 fetching corpus: 7700, signal 229642/331039 (executing program)
2022/11/16 05:24:04 fetching corpus: 7750, signal 230376/331781 (executing program)
2022/11/16 05:24:04 fetching corpus: 7800, signal 230754/332482 (executing program)
2022/11/16 05:24:05 fetching corpus: 7850, signal 231292/333245 (executing program)
2022/11/16 05:24:05 fetching corpus: 7900, signal 231727/333916 (executing program)
2022/11/16 05:24:05 fetching corpus: 7950, signal 232010/334577 (executing program)
2022/11/16 05:24:05 fetching corpus: 8000, signal 232551/335233 (executing program)
2022/11/16 05:24:05 fetching corpus: 8050, signal 232909/335872 (executing program)
2022/11/16 05:24:05 fetching corpus: 8100, signal 233385/336539 (executing program)
2022/11/16 05:24:05 fetching corpus: 8150, signal 233814/337188 (executing program)
2022/11/16 05:24:06 fetching corpus: 8200, signal 234249/337835 (executing program)
2022/11/16 05:24:06 fetching corpus: 8249, signal 234829/338484 (executing program)
2022/11/16 05:24:06 fetching corpus: 8299, signal 235170/339125 (executing program)
2022/11/16 05:24:06 fetching corpus: 8349, signal 235624/339760 (executing program)
2022/11/16 05:24:06 fetching corpus: 8399, signal 236045/340396 (executing program)
2022/11/16 05:24:06 fetching corpus: 8449, signal 236685/341041 (executing program)
2022/11/16 05:24:06 fetching corpus: 8499, signal 237103/341676 (executing program)
2022/11/16 05:24:07 fetching corpus: 8549, signal 237465/342286 (executing program)
2022/11/16 05:24:07 fetching corpus: 8599, signal 237783/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8649, signal 238107/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8699, signal 238499/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8749, signal 238961/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8799, signal 239452/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8849, signal 239922/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8899, signal 240400/342404 (executing program)
2022/11/16 05:24:07 fetching corpus: 8949, signal 240622/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 8999, signal 241034/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9049, signal 241369/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9099, signal 241716/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9149, signal 242043/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9199, signal 242539/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9249, signal 242831/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9299, signal 243230/342404 (executing program)
2022/11/16 05:24:08 fetching corpus: 9349, signal 243711/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9399, signal 244005/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9449, signal 244416/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9499, signal 244887/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9549, signal 245351/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9599, signal 245784/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9649, signal 246191/342404 (executing program)
2022/11/16 05:24:09 fetching corpus: 9699, signal 246414/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 9749, signal 246842/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 9799, signal 247221/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 9849, signal 247478/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 9899, signal 247654/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 9949, signal 247963/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 9999, signal 248357/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 10049, signal 248711/342404 (executing program)
2022/11/16 05:24:10 fetching corpus: 10099, signal 249303/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10149, signal 249567/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10199, signal 249932/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10249, signal 250439/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10299, signal 250894/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10349, signal 251057/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10399, signal 251481/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10449, signal 251860/342404 (executing program)
2022/11/16 05:24:11 fetching corpus: 10499, signal 252192/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10549, signal 252658/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10599, signal 253051/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10649, signal 253464/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10699, signal 253702/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10749, signal 253956/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10799, signal 254256/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10849, signal 254667/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10899, signal 254995/342404 (executing program)
2022/11/16 05:24:12 fetching corpus: 10949, signal 255228/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 10999, signal 255494/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11049, signal 255915/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11099, signal 256332/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11149, signal 256611/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11199, signal 256963/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11249, signal 257452/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11299, signal 257692/342404 (executing program)
2022/11/16 05:24:13 fetching corpus: 11349, signal 257881/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11399, signal 258221/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11449, signal 258486/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11499, signal 258753/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11549, signal 258952/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11599, signal 259202/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11649, signal 259732/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11699, signal 260073/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11749, signal 260430/342404 (executing program)
2022/11/16 05:24:14 fetching corpus: 11799, signal 260744/342404 (executing program)
2022/11/16 05:24:15 fetching corpus: 11816, signal 260820/342404 (executing program)
2022/11/16 05:24:15 fetching corpus: 11816, signal 260820/342404 (executing program)
2022/11/16 05:24:17 starting 8 fuzzer processes
05:24:17 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x535001, 0x0)
sendfile(r1, r0, &(0x7f0000000040)=0xfffffffffffffffd, 0x95b)
r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x2}}, './file0\x00'})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000100)={{r3}, 0x0, 0x8, @unused=[0xd3, 0x7, 0x929b47a, 0x81], @name="25b4f27f0e7d35cc4381067188d2b2cd1ac486e3cb3e3f1beca8202a9f184fa27141cefa9d250a1d493c47e15d5280b7f13c7d8df44abca8a52c1fdade6ef5d8b466ddab212b6beea15100f42a72b35596a88c121ee247a69d58095a85bbb2e3b40f1e1e702ea118978d6a7a731dcd93e0be804eb27f75ec46eafeacfbbd53d3905903766e5c40982bf72e3e8729fffdd6c1662afd3fe7ef8fb5faefeee2453cb79ae9d1fe32857c340df0cf3c774b3e77d511fb5d3c6252a1388b064d2e0c200f4c94776446e0d35ae5d5b0bfc1e0db4f0b02706c538f78bd7ee49c5530f58052cf89c42fddec3a682678fb4eab153c7cd1eae1a7a13ad01483bd81f8c6ff49cd34d39a85f9048e35228132fcbc6584de50fd922e293918a0f79323aff575b032613bcc3e81e21578b769ab757641e603e98bdb9973d977d59a3725fa478ff9876908bc4d8d2a8e3e9583055aabd9a061f6eac1237b307885ff0dfae03de526b0ff8c0ba2186d7e568ae8c802997fbe9387415cc2d2fe4587e5acc43e9c068df7c0f801c225062abcb6fea60fe8db67da8391de0ed4a700a9137fbce86a0646b4d8b5275ad1666679f9e0a3efddf30119e465c4b4b0e77710a2f63806413ec988b519f941b72939ce37b8bc9a8abe7a7d3e5cfea1624127680f3d78db4aa16bfbe35869738c8f972640a7db31ab34b5238d54e819a0083daae9aa023a5eeec1a7583533c0684a3542d864b98dc1dade6987959093eeaec53aded28bb92aa5d5f08bcf2bc24fe48101ef522987f1fcf79611545e5ede9bbfafe48403603184ebcc56b4e33d67ca1dc1dd05f6cc86193e38035b78f6b3ad462f3babb9bc62a1fe545375f83f584873f98b7096cc920b00ea36e25749e233592677b487e0513cf0ff6181df82ccef4882cec70917be54f7ca754ded4c7fceac57dc91dc1504c190ceb82fb30a79c24952a908a92f9bc09dee41ead409a17703bf8354665ea1c1a8113703d5f356c97e047a1d6a55d3d51f880904cc78b6a46f23cde4b37aee5d4ed381b4ca5be1fa6d1f964ec5a2da48772c610e55a85b7b1e4d213096bd76e8ec500c5e531b9e1d3d4b9bb9e779869c6696b853926f23baec6dcddfb1e899e2e92bfdfefad673c109aa108e914d9905f4e0f2fc3c7e52c8a200e68ca7597c724ec61fd5843b4b1803e628dfd2ae766d01bdb7385c847738dea17f5ffdbdcbd0e7730c9ee172fa41e269b06ea87621e67f4f52e5a4227870e86b8dae208c42433d62260321d92cf7ac118f2229fe22373fd98a3d1b535b43c5e2baf3c150a6b8db61d3329b7a760d0c41dbe2eb88eea52286b87a522e3af2474860a3e8e715c2709c7b4c8dec771fce8da74b5700dd60542f5294c5a8f19b5064b03e5b075b60ccdf800ac7f17ee161262274f39c555538d1645fc39e02e2a3819e523630a820fd50e28968260fc1f5182ec51f73b17801d0b5d0130402152de041d3c029b850251bb0b2944a995c8923258a793ca614602887fc9f5c189b2919e8886adcee0400d8395b70c80eeaefe2a7c1bd538e3295dc1a07ee244489c3ed912a1a309d371459f2eaf9c4cfad7ab60539edbf97aa396e089c31d021bf7cc13b3c27d21bf7d60b1e7ea8f406f972d8bdb736118839d94fb68461ff75eba6919693835a830d04958e6e7a831d7905a3e8b0c04869e5f1debc4b284e28bd3d48ed949e4e2aedf976fcb1b9aa76adecd3b9f7707bf215ada67fd3956f20d14645422f2ba93cce5fb6b1321791973a1e1e2bba561a5b532a422d6d5646c02b383eb8ff89f75de624f00117693d604b344d894782d1f0460f3e3bb6930a9e1280786d9423c135598939d38bc469cd811aa7fdac2893fed8d82e207c2b4bef08805608d9046799f4e8e1dc5157815785bac067ad2a4425653162e68f04cb432c3710133e7f343b7a82a23b6d228d4182d45ea778a4a1cd04cecdad85591c7fbb1a4795b72187a281d5376c0273a5912b6a8c50cd89c1d810d8c9085bfdfbbca8f958646511b383d600f9243ac0ad1879d1cf706941fac784cabccdeaf2f2bbfb1a8503e66d8c185158fd7c9ebe22900b26edb6960bc035a93d4c5ba0d3311a5f187a82d983b2bf3078d3a9a0adc267cce3d6686b2d4ee17ba8eaf4cc8573d55d1dd812ed0bfdd337b4fe74c8e8cc54cc6c1420a388789c7f6cdc6a5346a42fa89495f1722f979460e28a8ac8a30a2a6ca027c3c49501218989dcce9933b6051de5cae659b384f4cbb75939e76daa2c502fa3cafb755abdd1c64d41a0f05a63fb0658139dded36523b613ec4fb5138c384565d533b230ac3c4b38734e7225a36e62163167a25df1f2207e7f41cff27908df3fd20ff3c79b02a95c340b5f8b40bb445314baaa78c5d9e8112579230be5ab8ba11a21b89fe519b31b00125f0536dc6762f98b9adf32dcdebda6c7afc29f35b21fbef0a6043652bf609aae6edfe20ccc6229de6926b80cb55bca0494d92b8c37d531b8ea0bec987f2f570b9f22ad0e5d7969ecc5b15be51136596e4fa2ecdb010588d33575e2c416714a9c17108991145aa8bff2b26596f5688d24febd511b7b4d8c61ee21ad4106615e2038c3dc71b2e257ef6ed1d081403b0ee52acbf0243c11843c730fd81f0de5c7902e2ed5658ee7a254f3d240e1c2c765abdd50a6984990a0956fce197461f1ca7f5a54260db0b2faf9f4e78a35761fc437b83fa6bd155fc25afba035ca2140faaa8dbefbf95ee718d6778cbc84e486ae8c8db711fa7cab003ffed0def73bcfa0294467381cbc9ee09955f41a68bbee8923a0a1870b3a0fdb9d2c67e300a98b4200e32e7db97d47d6df7748860b8a2b630d54000a4d981c30b39f423790d5beb7c7ff518225e59b3b426b6ee2ec91a36a18b8b89c7fddcee2abe68d3626a1df214b610a9e076004ebf65f4dc63ac2931008bfa71bb07fcbf1b380275ca3e351096156191c6996fe260f14ad512514b0010be2a08fbf471a4e853d4f4d786c3407945900290dfc4ffe8f3947468d1d81aeaf5d83fa4279af8b2bcc9052acbe2d1bab4f0cf93a2e3a03cf2c032efcffecba6d8a85c0c73474778ffb1671131144b8f8edbd5d8c88fcb876dfef6bed245a286854b90f2b9d29e38e30345e82d125269ee7f1b218528f48df1363f3940a271e563dd19f7d8291d192c9013166a12e3cfb48430fe9216c767dfb1d5a037f29cd12f35d365cf94f57c9a7134b2f68be37c29994bc4ea0add7da2c651b20a2fa37dad3e4fc0dc7ffbdf3e25188950792b6c91def9403e2d6597c8b196915e348a6d00d004050261ef491fa95a0859b5c417ee8a2b4e813a9a95ada383412ffad559e3b81a6543fc7b6111b0146d0546cbba12d90aeed39b106133699345eafc5a3573746dc2a12852234051c0b5dfe671ec5c0e7150f9c226f7edd322747154c511969a1287487ba9cf1f0d945355e5d0df23166f673aa8b63e561cb97b24f202ae3c3dde19a9e0c382c86b80e78d2ebeb5696291f9e13407dd6607116214a36d003ef8d8afca8f324b8ad2dd85585d5a778aa64de502f7c8bc67a5337a7856566f43aef002549e4c7721e30e87b4479d45ad0ef5695441226ce5663972fb5174bc579aa8f38faa1ecd5aa0a5c57ef42247c410b00b9aca79812e7fcb9438390b6566aa4facf12bd7485e46e1913a026488aff8bbabd98fdfe6cda81a12ab1fe6a967ff2ef4c05435c489d12c909d0b67555efbda78bef7a09227ffdeed874be84745aca0f8bbc1c5ceda16dbfd63ed0110462d54d3c2efd7b8282cb56cdf00f6fde6ddc9794da8dd6efa53ad50a991eada833850bbe72aecab19f42ff59e65f68ef92c0263e8df811a034ae4404e756b483e4eceadee99d9c7273cd452bfa809b48da916b984d9e6b4966b21dd44e65e22010e8c8b836acc250bbdc29d8413f4331fd6b2b13c4a70c86dceb6748eb3e5d53b2987c8822025aa661891d0cd66ce22814df1af3bf27a05603b5e66855dcb532b62cc2e2c8428000399e9e677f0d99624ee188824a7e39621418635b72c08bfe9a7a8e1c3b893b70a33e72983c6e383be736e8b40defc7a57f25b00ae8e8c1032a3c4190fadc1e88adb8326b0408904839eccb6e8bac6eeb740893f56a2b88a163efcdf1621599e8060b82a31fe5a11f05a326745b238f76182250f12a318e578022c4aa3d83e8b128da4cd4b7efbce82ad9da4a8529bfe5b2e51354c6a101967f41ae5fef940c473a690df3c98aaeebc9c016fd630cd1a18e7f2a449318465b2fefa008bbbd1c497b8efa3320a07f4bc1385d5072d39db32a001288354e327498f4ded59f278d6e52749db6691522213093321a955a2ee15e6f02f0f7c1c37952337d2d343cfd01c719d6309f26dfa5bf40286bd5ecfa2d2d11f3243c278644c62d31b8ffd645b3b64bc0e8c0d8b5c6ee9aa0d70002fb59a08cbab71210c9092a3ecc2cc633bd1e091654662133ad3aaeba753c31e6b2c8930a1022ae2985d2543aa5781523bf55e82d4c17862081f2455ebee0afd79b7d561f1e23c9676fa0aabf60be71598f69f7ba4c01f095c80d4a706fc9ee9acc85c3f1e41c8a2d44aca6d165c9c58f4c3fe3a0bd87124a165c608fcd6a7c4c81adb4f9404cc3da8f11c017fc45fbdf8e536de54c1a5302f7b437c6837b9691acc28350989451ce48b2d1ccf7d0fe3c843cf52a5af8e79e3ec534bf326ccdb0c8c11c9678850d1d99060d1b721cb732cca2aea49bfc7093099d0abecccbcc9f8664b4e5ee24968146f08d88f95f17973db60957e934647f5984aff241f5600c5c229f1d94ab271d2c675f6b23c2d95ba95ce3be989123f539dde845328b53678ac0d3ef7fa942d7666467709c3d7fb1e7eb6632718f30478cd3b3ddbdf0f74f85d46e4b88bfd7121f1b6dd47afa6aea473fbcc9b85a9102a356d792746ead39ff0e8ea8c435eab198f24a8c0069a50c227a3ef65ce8251a767d98723ff076347bc047769628b39bec7a4b2e802f80153487b8379d5f3165f995b4e78b57688a55a676bdd6774ce15a77d6fc71c0fe7f42d49ccf2450830eb6728cab177df9be223622087e219ae935be06e31f2200d9f8022b2a894110bc0862c72418d52889d45b21d8e82e15b7ef398cabc78788e8e802f2af180fc515cd0828ebd86b32b44b68b71bdf1f8396f3f1788ec7e01ded7aae963dd4fdc1493f5dfb9185b91d083c08cce5ae9052e76e8c11667366c8516952d9a91f1ed0227d26a48fdb722979df14fd5956adb7b68c5201e496bdc63c033b202e3449988cd90eb60dab7bfd6544e7cb7680cb6b5b0bce95a3be3aa16a570825e30ee66998ec46adbfc8315057d5b5844f180b12aaedcab83eea5513368964ee938d1d49358e32d90a0f30071c928ba7d75a67c7a005a35415a5fdb1f8f44d60c2bfc70c14efa5e845c5605acb0506c680ecaf7dc7ba5d44f175dd0d46fd05d7df90916cb045964dd34e9b6e8187adfc6c774d1c9fcdc97ac36a14b4b7dd41406ef33c310c6c260010265e1935ab6b538b436add0ec89fd520bbd6a8b6f140921214c7bec15c28b1aafb9591e6af97450fc2e21b5a504d786dae3debeaabeaac67e11f235c85794bde323f054fb61d37c8ceb59f16120aae9deef30a6730e96ce78eba2d103b3b4442daf6c9235ea359b5da5c67c4f33879dad085d6a6c227a66407a4c1a538f413c72e12a2"})
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000001, 0x1010, r1, 0x15956000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r0)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x64, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc880}, 0x5)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/slab', 0x0, 0x142)
pread64(r5, &(0x7f00000012c0)=""/204, 0xcc, 0x20)
preadv(r2, &(0x7f0000002600)=[{&(0x7f00000013c0)=""/80, 0x50}, {&(0x7f0000001440)=""/203, 0xcb}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/9, 0x9}, {&(0x7f0000002580)=""/85, 0x55}], 0x5, 0xff, 0x6)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000002680)={{0x1, 0x1, 0x18, <r6=>r1, {0x80}}, './file0\x00'})
write$cgroup_freezer_state(r6, &(0x7f00000026c0)='FREEZING\x00', 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002700))
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002740), 0x381, 0x0)
openat(r7, &(0x7f0000002780)='./file0/file0\x00', 0x68001, 0x5)
ftruncate(r5, 0x100000000)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f00000027c0)={{}, "b0173e019349b8b989965502cdcb9358bf15bfdef3540e306c89e8d22cf0e262d0c82627598e33f1c546c0caaafb92d0c5f3d9a29f5ef689cd375a6c3c7df637e646391b6d726bed37dbdca5f78fa401853bb6d2c703433995224c707ff0d359a53410bab4a2940cf45bb15db2d7999561fa1913c5d3ad49b35ec5a2b5de93db1704a310cef6f6f39a5b793c7ed739fd5cf6ee7318b711a97c298dc633461a28b5cda3cd62748445a43fd286c58df2abb82824f9d1a63b1b36c25f34fc187d4c2fdf014127afe541f0e1d937a4a8a187dc8bcd7bed427f694d54ae07a650e8b8b1d0f455c9313eb8a4fef542fd36067e1bbf725e811a3a576672c09c7f8f2c949d6b2c6ebab9c9b691579f4c195946938510492a6afe4195f05219a8387ed2164de40e6957985b48625438533faa35275ff33138f14dd387c14a27acdb3301d84c33fb1dcef889874e9b3a281ddf86361c7f12e1cd83a7ec9e3cf7af4402edf7019d22f6f05387865c07f3714ddbfa1b941e10d6334823e957e0f867f27dc5addf722ec7c4b8531055842bc1113fc76d9de55576aef2b30e652c9e50043f1d06c0f18de5492b4d23cf8f8f48ee2198c3f505a43898cf93c03c2a49f32e1a5cdab0052f364af2a8eee543e5581840ea722c5d929de8ced0d40cef75c7c5b7582f93307f28071d74cac4d481a66cb1ceed8cc99352c70427e09b37b91b04bf8346145963085e600cb9dca4a4b5bb286457bb832b1760c331d1bf4326a12b79906d585b3ce671e038ce15e5563e65c637fe7d52f06fabbc8510415d6e371681ddffba7421aef4a80bd0197c241dcf7620f5b256be4c9689828d2221994513610f364d5b81a62b863d3083f43fc47ad85aac0dc07c154bff83f30f45da2062303ecae3bb456a64673ae92f17aba362854e8aa0b915cd26bb422047aff0673e0877adb4d701c3e919e0eae941d196dfa840a34177c354e88c65e3451bff0f38c17a3ef805c058da2ddc871bee88fbcbc8b0bed5ca19f409f83b5b4dabe59b36ac1b0277d06d6093dec16b30852cf49efeb4b42682a497df18c7f1f3529ab5ed86da83ba3097f5c64c4acb1f6dbe7fa8f66b3c6e395334ae997c427b3cd9a0ce39749436bdc453c6460521b3987acb4acc006cf826d62929f1498622c4edfc8f4e7ee9ce72a7b9a0ea74290e379f6c6e1cfff8be2cd3a3c92e007242d919a3acfb0abe61dec57805603f14e5c26eb39e59f494479686eba56c1b2d839d9d78424ceea8901b29d3ada747e648489819ca98579dbd15f337b737eefc3357c486d6645d9abe9cd6e4c5b04390bb82d80d47c53f942dc7b9cf4690067f27e1f11699cca04240636eb4a86f13c1eb398d4deb33dc0e5c09dcf4a1fe16336714557a7991768f310391ddad5c0990df786cf6dafe1ab9e8cd471c5347ed2797cfd63033bb0475a5b467edc32c3b9680839b89d6864ad0895f6830c5590c86f66861ed9a05d11c419e709e26568862856194f2e1b9aba1f1c85bac22971a1111285f4083a2fc949d784edd469ebc0e5aa46a59ad5d3b0bb261c46fbec7ca0f61c853a42bf163145221343204d5e7dd16e78fd4cb1052c6418df6253c3631fe570c639a2c2fc74def837df8ccdd3b3012dadb033e7a4a6cfa808bd58f33b78943b77fae9aa7971212dfc3e7e0c3080778587493fdf75a0ff17ce86d6d483e66b255c7ec6e56fb8cefae6de45584c18a7467a56beef379ad02bc78b9b42b622206c559ef7e29fdc0caa273415bdce8454a13b7b8ffc81c174846d1b799ef7d5140d0e0abfe52acce91e99030363332d7686965b5d9745e46ed69094f7a280f81b28092d34a50c443d54ab8435da1e028757e642cb64ac4a7e65a92799661b1d50d6bfccb9efdbb23715f29ee8be3024a973e1dfe3e3756231641102df60e8fb061f55958e088e1f63b4a578abb0993ea7d1f47fb9b972ed24da655e2cc80186319f0885e0d40a5898306e1bd6b4258e597d2d7ae672c9bc073c6aca7e915645ef400d66a51bd6319dea23a2bbf045dc6c0e323eecb9aa0563ee5828c15e0364ae191fb208e08b6bbeeb6f5eecdad5c23282109664663eb4223759a135170b1442711e0e8b8dd9c0ac92c8f2660fb12ab6a9fde2388d6c7bbd5bdd92b794ad81b9c0e998e1c5c63dab31f2b9768dd7f38d319dd28703de6da964ab9d7c03cb25ab8597ffe8279b69faa5b1eb1bf8ee9faba3fce7d06275f214cb23f594173d4483ccaf8debd2cdaf5ab77383fd69ff2914e7a61d7c9b8b7a4f0b87b7c36790a9a196d6f50ba43adfcd77d2fd35a31a51033fc7f30de2b586b56a47a1ce4c8908953de0ce1016cb36f70be447c3854e29ec5aee26918b9e19752dfb3035485536a0df7125b5063c03938c2a4f345a624bf025f5a84c88dc8167ba311f8f38a14be8e13874fe02eaef37772188662fdbd4c327166c731e1cef749e4db3225feacb4308cbb35950db0dbc6a16e66f18da1c41e02141e62034a978a54011f5a18845562ea4d79cb1fe8d99a99a5b9ef8151507310a19786776c54569b8c99e0a643318e9b054c7f6ccad689042f0e5b81c626c15ec56ef2fb27b95b2315d2dd22b1f0c0132f4da704e729c3c0f49a3629b81e5bf483f8a6d943233c7d2fd22e53f033612f26602a7687488d80e9b1b0685073037f2348c4188a9a66e0cdaafb69b35791c6d0c980a36e2eb50ee7d7bdc5f00507b80bc32cc51499ca0237dadeea2af009c2798067d4dc53f67bcd3ee757d0eba82af65192a787d77b48f09a01d55685b45cb73a0ca9840360d22ecd02867491ded50f23e60e00fc99cd55e4067b61d73dbbd07408d66b52fe2aa147747de44486083a226231cd23a17348577c55eb96c4f56d66dbc61d2939c580c123b7de453985d918136b7527bf1c26bb9a25cc33e26f31309f3c335a0a4c8a59463dca6c5297024baf6aafee4c2417817f0cc6ee38a2467e4c8f06f1e5eb4a76ceefcd1c8f9e37b8236ebfbde79deb6de40e45552df5829f550ab3f743671597afae8cc44c3e57969e11501d924658a9ee62c309cd837ea5c27bb735f684918c38e5646d975f43d6f1e0c4bbe0f468284a920d2dcf0097c8ef07babf1102420e7ad17b796a6b9a43391e78cc0c72f804b8f2f1ea58187bb09540a35e54aa1c4acca6e58a82338c96656414daa7daef12959210c870ebb71090997e70bade4a8e38e81927861f25e82ee96dbd31b12df5cdc8e8f23b98638b86236b06e646668efea114eef51f7a35f3a4dc98cc4abe734b38756c58c1d4b947c15fed9ad7a288b95871ffa5493762126e347c3ee67eaf58f2f1faf90ecd98595f45758fba8a090e21d1e5f04cc1a98196269045e70ba48e53452f06dd1702d70c4759568d57daef365fb966cf8c0917c15e0a93cf00f53ef3df1b5f528bd60369e7d922c255b32bb589856793f171a1ea3413580c576eaeead62481c7acebdbd90a887cd58f9e5203b1692153f93da2332bf73d40d471626b04dda890cbc4b9c066054df524a86d0865f56a7b603fc91fdb0a3f225517b47ffe775052fd0d39d492cae88fb2add7869717807baee4d6a4334873f2b9287863d923e900a08cbc0b3d6439fff0154d9eb3901d31eaf6320dfae64ed6e168635427c94bad5986df77a73d6afa17c0fac0c9544268e4bac848bef9bbefbba8031b30aeba75be3f397ec132a6df2ef22d3c36780233302fc92683e7e8d812075ef9b796db5eb29d6f9ec06056c6a82f5c6c987eb5e0f62a6e4d3406757d48f1ffbb6a422897002c464a1b69561d294733085f32b2619e3a41b35733fd3a43d4c0f2a3c127ae113e00a7db1affa382265e7c0666c3b87fd0599a97f226684274ad9859de5ea4f24e48562b6e5e52d8841fee30511c00276ad50adef94ca59f130b30113278e82123bb8154d18fd1af8efc18ed95d69429efeefe9073bf51b8fc3fe5b4671817449dec9164444ab60134f9f4dc438e8444d9aa34d849d73104a8073f880ca898e27f36d66b4f916a20ae0f49dea9fdd743bfebf3524f18590dad520a883a3ffa78745446b878d7057df4911d42b6cedf5dec28a63bf3e3d4d5fbbb152f721166bfb652342d692d4f6610a873e8adb55594a6414c378cab143af367d2d9f140899a3eeccd3bcedd1806014a71bb0f8b60fa129a7ac65a4fd5cc8239250358407ff9f79a8629e7ed884351f691d8940ee85793d5273821010a471079a3ab0d44dbba56dda0f4ee7f7d4332ab0d51bfaeebae0a0fa660be3d5f481677fe098fa3a7d72bd3bde401bba159cbc994b579c66a59c30def94addee63f5d78d33d6e5c837f04c8f9870c484fef0a00f04ed5ba1155e6d11788a1841f27639ffdd185d45a49fe9a103a253ffbda71b06c34f28709d8ab9f11e0ab71e682d52e0dc02efbfae57d947ebe3bdfca06e434ea2209b6edde4f18878e2c6b902df6576a412cb76e6c1af7650b74f3d3e923996ea64ca4fb5cf2c44c1b7b400fb8c964d03c335a0fdc731ee989a187c2d434b431261b5924446286aac6f6be99c10a1c7a207585499f33905cac6d3a7dc8f9bf709d068c70afc31e1e6d12bf0090a14bad27b3f3c185c63295878ee7a939a47d112261ed3a0629a411a76a6bc76f43ee154f7a57ae17f4542b0fb7db67a67b1ed731bcf141e218de2af0e13bff7619be6c56dc27d7a85a6be8099350600c9eda7e390026dc54d89f60ebad748bc39ca359cfad7aad5f9d3cfc85e7f45da34652d04fee86fcc41e08790a86cbde0fe5a1c29faddba92d932cf3e3707c20757fee1ba397c324ead47c24f27d8c97c746cae8513b21fa8bcbe07dccd9e26cc427eb34aecfb0fb48164ecfafe2a6f77cf063227a4ee4867a92c8309cace661bdc7134379390b9ecec7677038a1fb9470273f3d6b6516d29999a93f239dfc3c8d52275f30ef55e236c8dacc4f90411079830eeee3ae6c4c2701f84b889b6125103914335add098767c612692232a2219da076570362ea8779f2f6dfe0858271c9b9b5a925dbda52c1b16e1a865f8da8eae0a12230713ceb387c9e0712de6a7e516caa960164c47f6b7d81a30a0a9e98718641858b7ddbe1333279944e6a2ab7bd6fa9f4197d9828b76f449dbbc3463c731b455c60f2955d2898dbec7ac62724aad87a563c6517356c3a82c0a1c156bc7eee522b89001b4229b3cd03313bcc7ba2c73719be0c4c77e15ce2691f50f809cf6425bcba832af9f9e22788f5eede80682d5d98150258bd3119a4a9db0d936936ebd5d3727534f01b634625ab186c0279a41161462153f521b221376b8e2e2a32e4bd688be85dc1fd2d2ee54142642b3412f2b43a88a9c83eec4e14c7c8aa19ef75095166b5ece5fa85af9c0ba9f5775652d19c735c872feaff9dbdd69e1e447be633d51faa257985520d1b87c0dd55a2a9513e28bde2ebaf579b0c19d1defa209c1ad249f42549459d130832f1b4d73cef9763e679b8e10ad74321feb9319afbab85f96e702caf1c0b9b5455962bedb892f276185134787507c2ccceb5c59e3d6845d032633dbf8fd7238c54f122635a586c8b2cb0dc6f1bc813b8b0a5c69018452006c638b9ac141d59685013ae9c50223474aa4080ee18025c310ec0cded660af0fc45f0ab85505d0d8819572e09e82407786b35991ec5978738a337af3349448c629c671cdec0022fed114efbf2511d196c383ce3a5d84bfdddc7e83ae01b97356d031f0e245b071ceac0ad2968e102b9828a7153bbad62f6e83e073e659f958f3d0289"})

05:24:17 executing program 1:
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0)
r0 = io_uring_setup(0x621c, &(0x7f0000000040)={0x0, 0x1d0d, 0xa3efeadb1f45f174, 0x1, 0x10e})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>r0}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}]}, 0x7)
r3 = fcntl$dupfd(r0, 0x0, r1)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000180), &(0x7f00000001c0)={'U-', 0xa43}, 0x16, 0x1)
pwritev(r2, &(0x7f0000000580)=[{&(0x7f0000000200)="bef7e0915d2d904adb99", 0xa}, {&(0x7f0000000240)="d446c192e971e65d632bd20b78a3ca8a1f2e0f4b74df9755b34295056d082f84e912f573745e2b97076863713cfd9c2a4227f812e261a52345", 0x39}, {&(0x7f0000000280)="a370ff3d9ef320abaebc2db7562cc771308c3bfdb79016a5053ae9990af4a750ee49a896e1ca2874c5980844493fa3cd65d4cf3a0171a7e047a30311addff1b4a633371ebbc306facd238d0c61f6b840ba772148813ec786880f2c5da257569776933f4f7ef44152e4eb1c81691746a16e19c6e3b7b33f0cd27d5172451a67ec99abb6f32c324b7a9ec658f3d512779895489809bda6f3ec5db34d72da2637e8a2702c1afd589593a1e76d1ff9737f255268af37196839b5576f9fa1c5dff7e359effaacb253bce27b44d90a16c22c", 0xcf}, {&(0x7f0000000380)="f64e5fcd6469964980a783945321b4422ac8246ee7acd4de374d466f06bbb0c19103e4001cf9f53c54b028913f187269dae3d29f23c11792d4f0f3a8a4f91278b200970021b11dfe6516c068b2e7b6b6d6b76c347cb03b6fcbe3232c7598453ad0e48db33aa8b1ba1a278163c6b55386f997d11563993548918543ce6612e2b9d4", 0x81}, {&(0x7f0000000440)="57313493045ea1f2267da3c8a371aa971cc03d4704e047f7e0cb6e87681ed54b4f92b0f76b15602f4e027548be78ebed03828878d01ad59a20040ae32d9edae35bff3e33181daea2f638b271dd5f3c53c0e2530620d05378b9cde3aa4be40b15f5ab05", 0x63}, {&(0x7f00000004c0)="cbf84b5a56563ce75ea65560a5966e2b2a1e64e68d0dfa734c244b194f2908943278b79e199779110d769b427b0c12d6e3b29bae820af25523fbf93405cf5f27d7b7cb4b0a154fcf66cd3cb89342204159cd263b7299230b29dc5d1ba2a9f002803e833ee576b2864659920a22035cc84193742b8b8041f5e67b7ff090d3c47f26b931e2a175bfb9f68226ae07dd512190e4d503b2f0b13bbfc92846fada6bd7f5399d0a82e2f67207160e06ed624b5b8b696356", 0xb4}], 0x6, 0x7a, 0x8)
close(r3)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x400a80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0x5, 0x1, 0x80000000})
openat(r1, &(0x7f0000000700)='./file0\x00', 0x200100, 0xcd)
r6 = timerfd_create(0x8, 0x800)
fcntl$addseals(r6, 0x409, 0xd)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7, {0xee01}}, './file0\x00'})
ioctl(r1, 0x3, &(0x7f0000000780)="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")
ftruncate(r0, 0x7fffffff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001780)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'})
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)

05:24:17 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x3}}, 0x4)

05:24:17 executing program 3:
r0 = fork()
prlimit64(r0, 0xc, &(0x7f0000000000)={0x8, 0x4}, &(0x7f0000000040))
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(r1, 0x7, &(0x7f0000000080)={0xfffffffffffffffb, 0x1}, &(0x7f00000000c0))
syncfs(0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000140)={0x2, 0x200, 0x1, 0x3, 0xffffff7f, 0x6})
prlimit64(r0, 0x5, &(0x7f0000000180)={0x8001, 0x1}, &(0x7f00000001c0))
write$tun(r2, &(0x7f0000000200)={@void, @void, @llc={@snap={0x0, 0xab, "46ea", "193ea6", 0x800, "e985aec53d5f8a232aa32ed77e76d1f03bb756be0feda9c4f60a1b4dad9781b25d3908a63120ce8578dd6b24f663bbc8c37251d8667a4558b5a3a2250121cfce81050bb89883223ea6a3d03865642a9fb02b761da21af501317b8e4ca60c572600b82b46fe962f4a38777c29ca4b4617691cc4fe2f3016bab358951a1b5e6ce54e3d46e41d0ec7ec02b2b25dd00b36b26dacd625a45256c4f719b8d725ff5ebf77688a26219a6096a0c21057f90d00fa8a9d114bfb9255adbc3857f05345bc00a6c6eb9585641b3e9bdd81090ea105acf6b69b0a3220606513"}}}, 0xe2)
r3 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x7, 0x7, 0x8, 0x0, 0x8001, 0x24640, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x100, 0x1532}, 0x2000, 0x80000000, 0x2, 0x7, 0x40, 0x6cb8, 0x2, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, r2, 0xb)
prlimit64(r1, 0x5, &(0x7f0000000380)={0x1f, 0x9}, &(0x7f00000003c0))
prlimit64(r0, 0x7, &(0x7f0000000400)={0x1, 0x2}, &(0x7f0000000440))
prlimit64(r1, 0x9, &(0x7f0000000480)={0x8, 0xffffffffffffffff}, 0x0)
r4 = fork()
prlimit64(r4, 0x7, &(0x7f00000004c0)={0x0, 0x200}, &(0x7f0000000500))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x84b80, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000580))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
prlimit64(r4, 0x4, 0x0, &(0x7f00000005c0))
prlimit64(r1, 0x0, &(0x7f0000000600)={0x2, 0xb8b}, &(0x7f0000000640))

05:24:17 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x400802)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = dup2(r0, r2)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000040)={0x0, 0x7f})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r4=>r2, {0xff800000}}, './file0\x00'})
r5 = openat(r4, &(0x7f0000001480)='./file0\x00', 0x30202, 0x80)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000014c0)={<r6=>0x0, 0x1f, 0xc5, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000018c0)={<r7=>r6, 0xfd12, 0x7ff, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001cc0)={r6, 0x7, 0x8, 0x1})
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
r8 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f00000020c0)=""/86)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
syncfs(r0)
write$binfmt_aout(r5, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000002140)={{0x1, 0x1, 0x18, <r9=>r1}, './file0\x00'})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000002180)={r7, 0x7, 0x5})

05:24:17 executing program 5:
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040))
ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080))
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={0x3b, 0x8, 0x1, 0x1f, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x7f}}, './file0\x00'})
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/123)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000240))
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
fstatfs(r0, &(0x7f0000000300)=""/190)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0))
r2 = openat(r1, &(0x7f00000004c0)='./file1\x00', 0x28102, 0x0)
dup(r2)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x200001, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000540)={0x88, @remote, 0x4e21, 0x3, 'lblcr\x00', 0x18, 0x9, 0x70}, 0x2c)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x4008010)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000680)={0x7, 0x6, 0x3, 0x3, 0x8, "9735589a6556c660f3c4a9f0072521813bb3a5", 0x400, 0x37})

05:24:17 executing program 7:
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r2 = fsmount(r1, 0x0, 0x7d)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x0, 0xf9, 0x6, 0x0, 0xffffffff, 0x60240, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x9, 0x2, 0x1, 0x9, 0x101, 0x6, 0x0, 0xd9, 0x0, 0x101}, 0xffffffffffffffff, 0xf, r3, 0x1)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000001c0)=""/78)
openat(r4, &(0x7f0000000240)='./file0\x00', 0x8200, 0x97)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/206)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000380)={{r1}, "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"})
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000013c0), 0x385040, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0x100, &(0x7f0000001400)={0x3, 0x84, 0x1a0000, {r5}}, 0x20)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r6 = accept4$inet(r4, &(0x7f0000001440)={0x2, 0x0, @loopback}, &(0x7f0000001480)=0x10, 0x800)
ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000014c0)={{r6}, "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"})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000002580)={{0x1, 0x1, 0x18, <r7=>r4, {0x8}}, './file0\x00'})
perf_event_open(&(0x7f0000002500)={0x4, 0x80, 0x5, 0x9, 0x80, 0x2, 0x0, 0x40, 0x888, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000024c0), 0x6}, 0x10, 0x9, 0x5, 0x0, 0x43c1, 0xfff, 0x7, 0x0, 0x4, 0x0, 0x100000000000000}, 0x0, 0x10, r7, 0x5)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000025c0)={0x1, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x1ff, [0xffff, 0x968, 0x4, 0x5, 0x7, 0x8]}}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim]}, 0x50)

[   88.012668] audit: type=1400 audit(1668576257.929:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:24:17 executing program 6:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x11a, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0xe898b65fb23424e0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={<r2=>0x0, @multicast2, @broadcast}, &(0x7f0000000300)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', <r4=>0x0, 0x2f, 0x1, 0x3, 0x7333, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0xf2, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', <r5=>0x0, 0x4, 0x2, 0x2, 0xd7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x1, 0x80, 0x1, 0xffffff56}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r6=>0x0, 0x0, 0x5, 0x40, 0x5, 0x63, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8, 0x1000, 0x800}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x20c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x60a6ff7afeed3eac}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20c}}, 0x800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "d477d5a567b53de7ce26e56110cde2ca"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x28d1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000085}, 0xc34471e1e8495074)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000d00), r9)
r11 = openat2(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x200000, 0x40, 0x5}, 0x18)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x190, r12, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffc0}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x24044014)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000001080)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'})

[   89.316430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.318126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.320108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.321885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.322964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.323999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.326058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.327782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.328930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.329902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.330903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.332753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.337925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.340839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.342571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.345957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.345986] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.348582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.350180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.351449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.352040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.353849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.366396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.367349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.371595] Bluetooth: hci0: HCI_REQ-0x0c1a
[   89.371764] Bluetooth: hci2: HCI_REQ-0x0c1a
[   89.382546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   89.384789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   89.386167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   89.396624] Bluetooth: hci3: HCI_REQ-0x0c1a
[   89.397787] Bluetooth: hci1: HCI_REQ-0x0c1a
[   89.439849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   89.445750] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   89.453397] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   89.464431] Bluetooth: hci7: HCI_REQ-0x0c1a
[   89.495293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   89.497824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   89.499784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   89.504762] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   89.508731] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   89.511750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   89.518397] Bluetooth: hci6: HCI_REQ-0x0c1a
[   91.388308] Bluetooth: hci2: command 0x0409 tx timeout
[   91.388643] Bluetooth: hci5: Opcode 0x c03 failed: -110
[   91.390720] Bluetooth: hci4: Opcode 0x c03 failed: -110
[   91.451574] Bluetooth: hci3: command 0x0409 tx timeout
[   91.451592] Bluetooth: hci1: command 0x0409 tx timeout
[   91.452617] Bluetooth: hci0: command 0x0409 tx timeout
[   91.515665] Bluetooth: hci7: command 0x0409 tx timeout
[   91.579695] Bluetooth: hci6: command 0x0409 tx timeout
[   93.436134] Bluetooth: hci2: command 0x041b tx timeout
[   93.499567] Bluetooth: hci0: command 0x041b tx timeout
[   93.499663] Bluetooth: hci1: command 0x041b tx timeout
[   93.500081] Bluetooth: hci3: command 0x041b tx timeout
[   93.564111] Bluetooth: hci7: command 0x041b tx timeout
[   93.627633] Bluetooth: hci6: command 0x041b tx timeout
[   95.389163] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.392566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.397061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.410208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.415703] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   95.428664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.439017] Bluetooth: hci4: HCI_REQ-0x0c1a
[   95.483551] Bluetooth: hci2: command 0x040f tx timeout
[   95.547580] Bluetooth: hci3: command 0x040f tx timeout
[   95.548530] Bluetooth: hci1: command 0x040f tx timeout
[   95.548688] Bluetooth: hci0: command 0x040f tx timeout
[   95.611551] Bluetooth: hci7: command 0x040f tx timeout
[   95.676620] Bluetooth: hci6: command 0x040f tx timeout
[   97.467546] Bluetooth: hci4: command 0x0409 tx timeout
[   97.532558] Bluetooth: hci2: command 0x0419 tx timeout
[   97.595555] Bluetooth: hci0: command 0x0419 tx timeout
[   97.596725] Bluetooth: hci1: command 0x0419 tx timeout
[   97.597104] Bluetooth: hci3: command 0x0419 tx timeout
[   97.659592] Bluetooth: hci7: command 0x0419 tx timeout
[   97.723599] Bluetooth: hci6: command 0x0419 tx timeout
[   97.787608] Bluetooth: hci5: Opcode 0x c03 failed: -110
[   99.516562] Bluetooth: hci4: command 0x041b tx timeout
[  100.709986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  100.715148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  100.721884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  100.724541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  100.725933] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  100.727058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  100.730808] Bluetooth: hci5: HCI_REQ-0x0c1a
[  101.563543] Bluetooth: hci4: command 0x040f tx timeout
[  102.779726] Bluetooth: hci5: command 0x0409 tx timeout
[  103.612521] Bluetooth: hci4: command 0x0419 tx timeout
[  104.828555] Bluetooth: hci5: command 0x041b tx timeout
[  106.875559] Bluetooth: hci5: command 0x040f tx timeout
[  108.923865] Bluetooth: hci5: command 0x0419 tx timeout
[  144.512003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.512636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.514199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.730850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.732091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.735252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.837159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.838135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.839210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
05:25:15 executing program 6:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)

[  146.065671] audit: type=1400 audit(1668576315.982:7): avc:  denied  { open } for  pid=3646 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  146.067175] audit: type=1400 audit(1668576315.983:8): avc:  denied  { kernel } for  pid=3646 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  146.106811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.107445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.109218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
05:25:16 executing program 6:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)

05:25:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000140)="c0", 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
accept4(r1, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000000)=0x80, 0x80000)
ftruncate(r1, 0xfffffffffffffff7)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x9, 0x5, 0x3, 0x0, 0x1, 0x3400a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0xcb}, 0x1000, 0x3, 0x4, 0x7, 0x9, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x7ff}, 0xffffffffffffffff, 0xb, r1, 0x3)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

05:25:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f0000000140)="c0", 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
accept4(r1, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000000)=0x80, 0x80000)
ftruncate(r1, 0xfffffffffffffff7)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x9, 0x5, 0x3, 0x0, 0x1, 0x3400a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0xcb}, 0x1000, 0x3, 0x4, 0x7, 0x9, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x7ff}, 0xffffffffffffffff, 0xb, r1, 0x3)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

05:25:16 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x4, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local}, 0x10)

[  147.009322] device sit0 entered promiscuous mode
[  147.014896] device sit0 left promiscuous mode
[  147.036606] device sit0 entered promiscuous mode
[  147.038731] device sit0 left promiscuous mode
05:25:17 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1)

05:25:17 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8)
r2 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000480))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x200c1, 0x40)
sendfile(r1, r3, 0x0, 0xffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x7f, 0xf0, 0x5, 0x6, 0x0, 0x0, 0x800, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xac8, 0x0, @perf_bp={&(0x7f0000000640)}, 0xd105, 0x0, 0x8, 0x7, 0x2, 0xef, 0x4, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x60, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x44085)
lsetxattr$security_evm(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000980)=ANY=[@ANYBLOB="0503130000000300f79c7177774d96e1ea62482fba41f15d2350a9a53c2e80e6825aba29fcdfaaa35d258fa96e5136dda318354ed565a1b36782852d9c7d41393746de3371e737886a3da6e48b16467099e45208b98cc64db24939a8fd67b5145f75331b3ad361191247f213beb9f0c0a438e8c3e3d713356258a8810000000000000081eade4c03f5d976c1e8b1e986fd83eade356516343b1b70dd7b9387a546f3249348ca319c0ea34c596ad343cb6b0a5dcf9e3aa5fc8853dc1d28fd05183a1784d9310dcdedc1bd60ea78860c6306f4a72106aee144f5ab2ef9c8e9ca11c4ff2a67910311573b69cb30d4b91ba0777f10e0090240dfaf95371880b6bf2f0e2df08ba59029c736d821e4bbc0648d5cac"], 0x100, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5390, &(0x7f0000002340))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0xfffffffffffffffc)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bfb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x12, 0x8}, {&(0x7f00000006c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000880)=ANY=[@ANYBLOB='rodir,nonumtail=0,iocharset=koi8-u,uid=', @ANYRESDEC=0x0, @ANYBLOB="55a2b3cd445bb61e5c157831373e02455aff0f40"])

[  147.319041] hrtimer: interrupt took 26309 ns
05:25:17 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1)

[  147.475768] loop7: detected capacity change from 0 to 27
[  147.494334] FAT-fs (loop7): Unrecognized mount option "uid=00000000000000000000U¢³ÍD[¶\x17>EZÿ@" or missing value
[  147.660369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.661512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.662911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.667629] loop7: detected capacity change from 0 to 27
[  147.677739] FAT-fs (loop7): Unrecognized mount option "uid=00000000000000000000U¢³ÍD[¶\x17>EZÿ@" or missing value
[  147.705998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.706691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.708057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.796363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.797070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.798447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.844795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.845374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.846934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.983625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.984231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.985696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.043814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.044422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.045844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.807158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.813019] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.814363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.818137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.820630] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.822150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.824931] Bluetooth: hci0: HCI_REQ-0x0c1a
[  151.118142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.120541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.121900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.125243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.127208] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.128364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.131830] Bluetooth: hci2: HCI_REQ-0x0c1a
[  151.222208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.223848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.224846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.226900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.233648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.235264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.239579] Bluetooth: hci3: HCI_REQ-0x0c1a
[  151.359710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.360833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.363244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.412008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.413055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.417003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.829819] Bluetooth: hci0: command 0x0409 tx timeout
[  153.148691] Bluetooth: hci2: command 0x0409 tx timeout
[  153.149889] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  153.276590] Bluetooth: hci3: command 0x0409 tx timeout
[  154.875592] Bluetooth: hci0: command 0x041b tx timeout
[  155.195564] Bluetooth: hci2: command 0x041b tx timeout
[  155.323636] Bluetooth: hci3: command 0x041b tx timeout
[  155.721868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.723375] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.725350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.728334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.729845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  155.731113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.737288] Bluetooth: hci1: HCI_REQ-0x0c1a
[  156.924514] Bluetooth: hci0: command 0x040f tx timeout
[  157.243544] Bluetooth: hci2: command 0x040f tx timeout
[  157.372530] Bluetooth: hci3: command 0x040f tx timeout
[  157.755625] Bluetooth: hci1: command 0x0409 tx timeout
[  158.971527] Bluetooth: hci0: command 0x0419 tx timeout
[  159.291522] Bluetooth: hci2: command 0x0419 tx timeout
[  159.420520] Bluetooth: hci3: command 0x0419 tx timeout
[  159.803631] Bluetooth: hci1: command 0x041b tx timeout
[  161.851579] Bluetooth: hci1: command 0x040f tx timeout
[  163.899579] Bluetooth: hci1: command 0x0419 tx timeout
[  177.773933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.774760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.776121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.854331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.855167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.856513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.064260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.065397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.067045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.098475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.099046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.100525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.532886] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  180.539069] Bluetooth: Wrong link type (-22)
[  180.539453] Bluetooth: Wrong link type (-22)
[  180.543666] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  180.545102] Bluetooth: Wrong link type (-22)
[  180.545511] Bluetooth: Wrong link type (-22)
[  180.696822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.697637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.699138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.724714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.725379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.727291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.133106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.134672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.136693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.170601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.171518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.173419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
05:26:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x28aa2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x7040, 0x5, 0x0, 0x4, 0x10000, 0x0, 0xe8, 0x0, 0xf3, 0x0, 0x3b5}, r0, 0x9, r4, 0xb)

05:26:07 executing program 0:
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x40, 0x6, '9P2000'}, 0x13)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}})

05:26:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r1, r0, 0x80000)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)=""/98, 0x62)

05:26:07 executing program 5:
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x244, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff00}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfea1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5b28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa65b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7bbe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd76}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xee}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0)

05:26:07 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1)

05:26:07 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x3}}, 0x4)

05:26:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x20, 0x9e, 0x7f, 0x0, 0x421, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x9, 0xefd1}, 0x41460, 0x8, 0xffff7fff, 0x2, 0xe46, 0x4, 0x1f, 0x0, 0xfffffffa, 0x0, 0xc4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="1b7a1666851945cd80a5a2ac0000000000000000b2122fbfdce63a77a865f0778bd425e749feed51f1439746599f0422a9d32dcef6b20d00ce737d913518a188cb9ad737a3f10ee2333baed5899c00ab0d1cce9ff265d634b3b2996ff3a5a91a9283b3b8cbfac984eccdb937f1d200bf96b5b75d5da9e818e348b4", 0x7b, 0x8, 0x0, 0x2}])
sync()

[  197.126356] Bluetooth: hci2: ACL packet for unknown connection handle 0
05:26:07 executing program 1:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

[  197.138639] Bluetooth: Wrong link type (-22)
[  197.139530] Bluetooth: Wrong link type (-22)
[  197.140613] Bluetooth: hci2: link tx timeout
[  197.141539] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  197.179879] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'.
[  197.185944] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'.
[  197.191438] loop3: detected capacity change from 0 to 40
05:26:07 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x3}}, 0x4)

[  197.244089] audit: type=1400 audit(1668576367.160:9): avc:  denied  { write } for  pid=5765 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
05:26:07 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1)

05:26:07 executing program 5:
getpid()
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xb, r1, 0x9)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000340))
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x802, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@uname={'uname', 0x3d, '9p\x00'}}, {@loose}, {@version_u}, {@uname={'uname', 0x3d, 'hugetlbfs\x00'}}], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x301000, 0x4)

[  197.342411] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  197.369766] Bluetooth: Wrong link type (-22)
[  197.370647] Bluetooth: Wrong link type (-22)
[  197.371811] Bluetooth: hci2: link tx timeout
[  197.372562] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  197.418322] SELinux:  Context  is not valid (left unmapped).
05:26:07 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004001b0000000000000000000200000030", 0x3d, 0x1600}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
mount$9p_unix(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x100008, &(0x7f0000000840)={'trans=unix,', {[{@fscache}, {@debug={'debug', 0x3d, 0xe7af}}, {@uname={'uname', 0x3d, 'smackfstransmute'}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}})
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000000600)=[{&(0x7f0000000140)="0b0814d2a4ee22dd489e2df94136273aa74d3e8ac7ad2c5c472488bc75361a2079fb6082097ff4b7a6d929039a1d45dbb21ffe4ff8c4755091296be0303af58f5f4baf26f8fc642232ff630c9e2c282e8a6b29036cf4e9d290f01ebda5cec7f14b1a854f669789a5c5a78c94ea859c47fcebd62ea01fd53da1c54a24bafd9a7bafa0abdd041e18a5128418f5a391aaa74d8ba344ce423be69ba560d8d390f03e86cfa476a7f44b57b7dcf246", 0xac}, {&(0x7f0000000300)="6f003f2d470ceea9c960d253175464496485044a2011e2655e0306e0c0a910af29459fef5847fe0a61669623b18c32345ba329c9a01b45afc184f619b32e3d403cd6e32c4508dc5e20210d7b07a528b54bbbc009271471cb899e2e445b80f207676c4eb41b517ab2838a6b215a5ee5d3ab805035e6600caf81b5b0b9d22f1f9f2894dc86ca26873dffb3b57072317c416de9eb0f66b89d22690076263d20b4e04bde18d3dc29c8d33719d9351c12ebfbe2b40f5458e95af42b462b23c8631564c63d", 0xc2, 0x2}, {&(0x7f0000000400)="e630639cfc0a9acdc1c96aebb4b307097dd1a246f0655106a03d554d509695bd5117407163cc8aa11e3858daa13a5ba0f47e1317203e4f493a8cc9882e40ec78f1461e2a25591fe4db0b5d95b1b5772a1b79ced9e34197b4e7ebc64f9e26e6e706e1e5cf232609129815007665ac140c676c78ae3464e09c565ed568da93f1cdfcf929f75a173d4e7fab576e12d746df950284f7b3cf1e8f8c354c1887ab2971426d30b9d98168bfda17e7c46404b539d2be7ec3a4dfa0", 0xb7, 0x8}, {&(0x7f00000004c0)="a234989595f7da61bb35af81d0d62c8215fae736c5597c6e3f24581a30b6f473c41f150c7e3a10c4a2022926b601d56bfffb71c12673a7d998273ffb33dd155f910e4bbf27834a6c95597ee344d1eec4b8bf93995062ecf5ce101e53f3d5cce5edfc99dd1d526de961b529d23cb85aefc2beebdb826a75cfc07473ae287797460823914098986686d5d8ef0033551d18c589c0ed31f459c678f4217cd0a7b96cb312", 0xa2, 0x6608}, {&(0x7f0000000580)="df4541b8918f536d8913f26844f833bb614f393c054bed3c1d24dc592bf40d3ac8ae9e17b782bfa1b0061c873e8eadf2645cbba0a6b1e819d85bfd34a493d6565efaed092c77222ed9c988aaae5ec9702ec26f661bd0f5700bf6d93a44ef1613207f8c63262ab249c4351a9e9119db", 0x6f, 0x3}, {&(0x7f00000000c0)="633d6a8231bafbe4", 0x8, 0x1}], 0x8804, &(0x7f00000006c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@nouid32}, {@grpid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@mblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@obj_user}]})

05:26:07 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x3}}, 0x4)

[  197.531860] loop0: detected capacity change from 0 to 1024
[  197.581296] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 27(27)
[  197.582860] EXT4-fs error (device loop0): ext4_quota_enable:6906: comm syz-executor.0: Bad quota inode # 3
[  197.583787] EXT4-fs warning (device loop0): ext4_enable_quotas:6943: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
[  197.595315] EXT4-fs (loop0): mount failed
[  197.622646] loop0: detected capacity change from 0 to 102
[  197.627509] EXT4-fs: quotafile must be on filesystem root
[  197.635115] loop0: detected capacity change from 0 to 1024
[  197.638825] ext4: Unknown parameter 'ext3'
[  197.659062] loop0: detected capacity change from 0 to 102
[  197.659700] EXT4-fs: quotafile must be on filesystem root
[  197.665303] Bluetooth: hci2: ACL packet for unknown connection handle 0
05:26:07 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x8001, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x20, 0x9e, 0x7f, 0x0, 0x421, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x9, 0xefd1}, 0x41460, 0x8, 0xffff7fff, 0x2, 0xe46, 0x4, 0x1f, 0x0, 0xfffffffa, 0x0, 0xc4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="1b7a1666851945cd80a5a2ac0000000000000000b2122fbfdce63a77a865f0778bd425e749feed51f1439746599f0422a9d32dcef6b20d00ce737d913518a188cb9ad737a3f10ee2333baed5899c00ab0d1cce9ff265d634b3b2996ff3a5a91a9283b3b8cbfac984eccdb937f1d200bf96b5b75d5da9e818e348b4", 0x7b, 0x8, 0x0, 0x2}])
sync()

[  197.734766] Bluetooth: Wrong link type (-22)
[  197.735181] Bluetooth: Wrong link type (-22)
[  197.735726] Bluetooth: hci2: link tx timeout
[  197.736044] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
05:26:07 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004001b0000000000000000000200000030", 0x3d, 0x1600}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
mount$9p_unix(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x100008, &(0x7f0000000840)={'trans=unix,', {[{@fscache}, {@debug={'debug', 0x3d, 0xe7af}}, {@uname={'uname', 0x3d, 'smackfstransmute'}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}})
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000000600)=[{&(0x7f0000000140)="0b0814d2a4ee22dd489e2df94136273aa74d3e8ac7ad2c5c472488bc75361a2079fb6082097ff4b7a6d929039a1d45dbb21ffe4ff8c4755091296be0303af58f5f4baf26f8fc642232ff630c9e2c282e8a6b29036cf4e9d290f01ebda5cec7f14b1a854f669789a5c5a78c94ea859c47fcebd62ea01fd53da1c54a24bafd9a7bafa0abdd041e18a5128418f5a391aaa74d8ba344ce423be69ba560d8d390f03e86cfa476a7f44b57b7dcf246", 0xac}, {&(0x7f0000000300)="6f003f2d470ceea9c960d253175464496485044a2011e2655e0306e0c0a910af29459fef5847fe0a61669623b18c32345ba329c9a01b45afc184f619b32e3d403cd6e32c4508dc5e20210d7b07a528b54bbbc009271471cb899e2e445b80f207676c4eb41b517ab2838a6b215a5ee5d3ab805035e6600caf81b5b0b9d22f1f9f2894dc86ca26873dffb3b57072317c416de9eb0f66b89d22690076263d20b4e04bde18d3dc29c8d33719d9351c12ebfbe2b40f5458e95af42b462b23c8631564c63d", 0xc2, 0x2}, {&(0x7f0000000400)="e630639cfc0a9acdc1c96aebb4b307097dd1a246f0655106a03d554d509695bd5117407163cc8aa11e3858daa13a5ba0f47e1317203e4f493a8cc9882e40ec78f1461e2a25591fe4db0b5d95b1b5772a1b79ced9e34197b4e7ebc64f9e26e6e706e1e5cf232609129815007665ac140c676c78ae3464e09c565ed568da93f1cdfcf929f75a173d4e7fab576e12d746df950284f7b3cf1e8f8c354c1887ab2971426d30b9d98168bfda17e7c46404b539d2be7ec3a4dfa0", 0xb7, 0x8}, {&(0x7f00000004c0)="a234989595f7da61bb35af81d0d62c8215fae736c5597c6e3f24581a30b6f473c41f150c7e3a10c4a2022926b601d56bfffb71c12673a7d998273ffb33dd155f910e4bbf27834a6c95597ee344d1eec4b8bf93995062ecf5ce101e53f3d5cce5edfc99dd1d526de961b529d23cb85aefc2beebdb826a75cfc07473ae287797460823914098986686d5d8ef0033551d18c589c0ed31f459c678f4217cd0a7b96cb312", 0xa2, 0x6608}, {&(0x7f0000000580)="df4541b8918f536d8913f26844f833bb614f393c054bed3c1d24dc592bf40d3ac8ae9e17b782bfa1b0061c873e8eadf2645cbba0a6b1e819d85bfd34a493d6565efaed092c77222ed9c988aaae5ec9702ec26f661bd0f5700bf6d93a44ef1613207f8c63262ab249c4351a9e9119db", 0x6f, 0x3}, {&(0x7f00000000c0)="633d6a8231bafbe4", 0x8, 0x1}], 0x8804, &(0x7f00000006c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@nouid32}, {@grpid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@mblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@obj_user}]})

[  197.824957] loop0: detected capacity change from 0 to 1024
[  197.826759] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  197.828270] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  197.829330] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  197.830349] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  197.831569] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2
[  197.836921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.838052] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.839391] Buffer I/O error on dev sr0, logical block 0, async page read
[  197.840677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.842039] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2
[  197.843181] Buffer I/O error on dev sr0, logical block 1, async page read
[  197.843298] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 27(27)
[  197.844208] Buffer I/O error on dev sr0, logical block 2, async page read
[  197.846447] Buffer I/O error on dev sr0, logical block 3, async page read
[  197.847560] Buffer I/O error on dev sr0, logical block 4, async page read
[  197.848602] Buffer I/O error on dev sr0, logical block 5, async page read
[  197.849727] Buffer I/O error on dev sr0, logical block 6, async page read
[  197.850857] Buffer I/O error on dev sr0, logical block 7, async page read
[  197.852680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.853074] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.853654] Buffer I/O error on dev sr0, logical block 0, async page read
[  197.854290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.855089] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.855695] Buffer I/O error on dev sr0, logical block 1, async page read
[  197.858830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.859226] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.863589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.864000] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.878873] EXT4-fs error (device loop0): ext4_quota_enable:6906: comm syz-executor.0: Bad quota inode # 3
[  197.890970] EXT4-fs warning (device loop0): ext4_enable_quotas:6943: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
[  197.895700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.896108] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.896754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.897137] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  197.898067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.898491] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.899162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.899642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.900115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.900605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.901097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.901618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.902103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.904025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.905308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.905837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.906325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.906843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.907333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.907848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.908330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.908888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.909390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.909917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.910412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.910928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.912196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.912701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.913240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.913350] EXT4-fs (loop0): mount failed
[  197.914188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.914298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.914402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.916286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.916946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.917486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.918055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.919716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.920647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.921157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.921686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.922163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.922675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.923161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.923688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.924176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.924704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.925222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.925892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.926374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.926934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.927434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.928156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.928720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.929226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.929795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.930308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.931613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.932132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.932686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.933179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.933704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.934221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.934753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.935252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.935798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.936652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.937136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.937720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.938203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.938793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.939281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.939875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.940386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.940911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.941411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.942002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.942574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.943105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.943641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.944134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.944692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.945171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.945729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.946229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.946768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.947638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.948114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.948692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.949177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.949736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.950234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.951051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.951634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.952148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.952725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.953250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.978742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.979559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.980076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.980713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.981195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.981833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.982321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.983003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.983778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.984692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.985402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.986311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.987055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  197.988077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.015000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.026014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.026834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.027313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.027993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.028519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.029058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.029631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.030551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.031050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.031575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.034921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.035392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.036016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.036460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.036962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.037450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  198.080249] 9pnet_fd: Insufficient options for proto=fd
[  198.240339] syz-executor.3: attempt to access beyond end of device
[  198.240339] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  199.163622] Bluetooth: hci2: command 0x0406 tx timeout
05:26:20 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)

[  210.517228] loop0: detected capacity change from 0 to 1024
[  210.547773] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 27(27)
05:26:20 executing program 1:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

05:26:20 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x28aa2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x7040, 0x5, 0x0, 0x4, 0x10000, 0x0, 0xe8, 0x0, 0xf3, 0x0, 0x3b5}, r0, 0x9, r4, 0xb)

05:26:20 executing program 5:
getpid()
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xb, r1, 0x9)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000340))
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x802, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@uname={'uname', 0x3d, '9p\x00'}}, {@loose}, {@version_u}, {@uname={'uname', 0x3d, 'hugetlbfs\x00'}}], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x301000, 0x4)

05:26:20 executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

05:26:20 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

05:26:20 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004001b0000000000000000000200000030", 0x3d, 0x1600}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
mount$9p_unix(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x100008, &(0x7f0000000840)={'trans=unix,', {[{@fscache}, {@debug={'debug', 0x3d, 0xe7af}}, {@uname={'uname', 0x3d, 'smackfstransmute'}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}})
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000000600)=[{&(0x7f0000000140)="0b0814d2a4ee22dd489e2df94136273aa74d3e8ac7ad2c5c472488bc75361a2079fb6082097ff4b7a6d929039a1d45dbb21ffe4ff8c4755091296be0303af58f5f4baf26f8fc642232ff630c9e2c282e8a6b29036cf4e9d290f01ebda5cec7f14b1a854f669789a5c5a78c94ea859c47fcebd62ea01fd53da1c54a24bafd9a7bafa0abdd041e18a5128418f5a391aaa74d8ba344ce423be69ba560d8d390f03e86cfa476a7f44b57b7dcf246", 0xac}, {&(0x7f0000000300)="6f003f2d470ceea9c960d253175464496485044a2011e2655e0306e0c0a910af29459fef5847fe0a61669623b18c32345ba329c9a01b45afc184f619b32e3d403cd6e32c4508dc5e20210d7b07a528b54bbbc009271471cb899e2e445b80f207676c4eb41b517ab2838a6b215a5ee5d3ab805035e6600caf81b5b0b9d22f1f9f2894dc86ca26873dffb3b57072317c416de9eb0f66b89d22690076263d20b4e04bde18d3dc29c8d33719d9351c12ebfbe2b40f5458e95af42b462b23c8631564c63d", 0xc2, 0x2}, {&(0x7f0000000400)="e630639cfc0a9acdc1c96aebb4b307097dd1a246f0655106a03d554d509695bd5117407163cc8aa11e3858daa13a5ba0f47e1317203e4f493a8cc9882e40ec78f1461e2a25591fe4db0b5d95b1b5772a1b79ced9e34197b4e7ebc64f9e26e6e706e1e5cf232609129815007665ac140c676c78ae3464e09c565ed568da93f1cdfcf929f75a173d4e7fab576e12d746df950284f7b3cf1e8f8c354c1887ab2971426d30b9d98168bfda17e7c46404b539d2be7ec3a4dfa0", 0xb7, 0x8}, {&(0x7f00000004c0)="a234989595f7da61bb35af81d0d62c8215fae736c5597c6e3f24581a30b6f473c41f150c7e3a10c4a2022926b601d56bfffb71c12673a7d998273ffb33dd155f910e4bbf27834a6c95597ee344d1eec4b8bf93995062ecf5ce101e53f3d5cce5edfc99dd1d526de961b529d23cb85aefc2beebdb826a75cfc07473ae287797460823914098986686d5d8ef0033551d18c589c0ed31f459c678f4217cd0a7b96cb312", 0xa2, 0x6608}, {&(0x7f0000000580)="df4541b8918f536d8913f26844f833bb614f393c054bed3c1d24dc592bf40d3ac8ae9e17b782bfa1b0061c873e8eadf2645cbba0a6b1e819d85bfd34a493d6565efaed092c77222ed9c988aaae5ec9702ec26f661bd0f5700bf6d93a44ef1613207f8c63262ab249c4351a9e9119db", 0x6f, 0x3}, {&(0x7f00000000c0)="633d6a8231bafbe4", 0x8, 0x1}], 0x8804, &(0x7f00000006c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@nouid32}, {@grpid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@mblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@obj_user}]})

05:26:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r1, r0, 0x80000)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)=""/98, 0x62)

[  210.551791] EXT4-fs error (device loop0): ext4_quota_enable:6906: comm syz-executor.0: Bad quota inode # 3
[  210.558637] EXT4-fs warning (device loop0): ext4_enable_quotas:6943: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
[  210.560356] EXT4-fs (loop0): mount failed
[  210.566970] loop3: detected capacity change from 0 to 40
[  210.570005] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  210.583753] Bluetooth: Wrong link type (-22)
[  210.584667] Bluetooth: Wrong link type (-22)
[  210.585425] Bluetooth: hci2: link tx timeout
[  210.586073] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.586491] loop0: detected capacity change from 0 to 102
[  210.590892] EXT4-fs: quotafile must be on filesystem root
[  210.762617] 9pnet_fd: Insufficient options for proto=fd
[  210.780294] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  210.780992] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  210.781502] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  210.781943] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  210.782439] blk_print_req_error: 121 callbacks suppressed
[  210.782447] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  210.855162] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  210.855881] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  210.856350] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  210.856832] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  210.857334] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2
[  210.857887] buffer_io_error: 135 callbacks suppressed
[  210.857894] Buffer I/O error on dev sr0, logical block 0, async page read
[  210.858738] Buffer I/O error on dev sr0, logical block 1, async page read
[  210.859199] Buffer I/O error on dev sr0, logical block 2, async page read
[  210.859686] Buffer I/O error on dev sr0, logical block 3, async page read
[  210.860150] Buffer I/O error on dev sr0, logical block 4, async page read
[  210.860640] Buffer I/O error on dev sr0, logical block 5, async page read
[  210.861101] Buffer I/O error on dev sr0, logical block 6, async page read
[  210.861583] Buffer I/O error on dev sr0, logical block 7, async page read
[  210.903841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  210.904264] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  210.905707] Buffer I/O error on dev sr0, logical block 0, async page read
[  210.906211] Buffer I/O error on dev sr0, logical block 1, async page read
[  210.942447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  210.943313] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.948132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  210.948951] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.991754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  210.992156] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.992817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  210.993188] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.996237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  210.997002] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  211.111289] syz-executor.3: attempt to access beyond end of device
[  211.111289] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  212.347642] Bluetooth: hci6: command 0x0406 tx timeout
[  212.347634] Bluetooth: hci7: command 0x0406 tx timeout
[  220.539549] Bluetooth: hci4: command 0x0406 tx timeout
05:26:33 executing program 5:
getpid()
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xb, r1, 0x9)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000340))
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x802, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@uname={'uname', 0x3d, '9p\x00'}}, {@loose}, {@version_u}, {@uname={'uname', 0x3d, 'hugetlbfs\x00'}}], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x301000, 0x4)

05:26:33 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:33 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r1, r0, 0x80000)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)=""/98, 0x62)

05:26:33 executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

05:26:33 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

05:26:33 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
[  223.568988] loop3: detected capacity change from 0 to 40
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

05:26:33 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x28aa2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x7040, 0x5, 0x0, 0x4, 0x10000, 0x0, 0xe8, 0x0, 0xf3, 0x0, 0x3b5}, r0, 0x9, r4, 0xb)

05:26:33 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x28aa2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x7040, 0x5, 0x0, 0x4, 0x10000, 0x0, 0xe8, 0x0, 0xf3, 0x0, 0x3b5}, r0, 0x9, r4, 0xb)

[  223.581137] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  223.589505] Bluetooth: Wrong link type (-22)
[  223.590262] Bluetooth: Wrong link type (-22)
[  223.591249] Bluetooth: hci3: link tx timeout
[  223.592097] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.639295] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  223.653048] Bluetooth: Wrong link type (-22)
[  223.653809] Bluetooth: Wrong link type (-22)
[  223.654736] Bluetooth: hci2: link tx timeout
[  223.655333] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
05:26:33 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

05:26:33 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:33 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)

[  223.900175] 9pnet_fd: Insufficient options for proto=fd
[  223.952176] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  223.971814] Bluetooth: Wrong link type (-22)
[  223.972615] Bluetooth: Wrong link type (-22)
[  223.973389] Bluetooth: hci3: link tx timeout
[  223.973997] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.982930] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  223.994062] Bluetooth: Wrong link type (-22)
[  223.994590] Bluetooth: Wrong link type (-22)
[  223.995161] Bluetooth: hci2: link tx timeout
[  223.995619] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  224.369324] syz-executor.3: attempt to access beyond end of device
[  224.369324] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  224.370536] buffer_io_error: 7 callbacks suppressed
[  224.370562] Buffer I/O error on dev loop3, logical block 10, lost async page write
[  224.794971] Bluetooth: hci5: command 0x0406 tx timeout
[  225.595588] Bluetooth: hci3: command 0x0406 tx timeout
05:26:49 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

05:26:49 executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

05:26:49 executing program 7:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

05:26:49 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)

05:26:49 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:49 executing program 3:
getpid()
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xb, r1, 0x9)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000340))
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x802, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@uname={'uname', 0x3d, '9p\x00'}}, {@loose}, {@version_u}, {@uname={'uname', 0x3d, 'hugetlbfs\x00'}}], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x301000, 0x4)

05:26:49 executing program 5:
getpid()
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = signalfd(r0, &(0x7f0000000240)={[0xfffffffffffffff8]}, 0x8)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xf7, 0xb1, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x7fffffff, 0x7f}, 0x4400, 0x100000000, 0x5, 0x0, 0x7ff, 0x1f, 0x1f, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xb, r1, 0x9)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000340))
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x802, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@uname={'uname', 0x3d, '9p\x00'}}, {@loose}, {@version_u}, {@uname={'uname', 0x3d, 'hugetlbfs\x00'}}], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x301000, 0x4)

05:26:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x28aa2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x7040, 0x5, 0x0, 0x4, 0x10000, 0x0, 0xe8, 0x0, 0xf3, 0x0, 0x3b5}, r0, 0x9, r4, 0xb)

[  239.533772] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  239.559893] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  239.573841] Bluetooth: Wrong link type (-22)
[  239.574721] Bluetooth: Wrong link type (-22)
[  239.575587] Bluetooth: hci3: link tx timeout
[  239.576177] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
05:26:49 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)

05:26:49 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
r1 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:49 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

[  239.709956] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  239.758781] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  239.760306] Bluetooth: Wrong link type (-22)
[  239.761023] Bluetooth: Wrong link type (-22)
[  239.761855] Bluetooth: hci3: link tx timeout
[  239.762441] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
05:26:49 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)

05:26:49 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:49 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

[  239.955008] Bluetooth: hci2: ACL packet for unknown connection handle 0
05:26:49 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:26:50 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)

05:26:50 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)

[  240.208363] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  240.233102] Bluetooth: Wrong link type (-22)
[  240.233822] Bluetooth: Wrong link type (-22)
[  240.234655] Bluetooth: hci3: link tx timeout
[  240.235224] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
05:26:50 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bond0\x00', {0x2, 0x0, @empty}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x64d0, 0x0, 0x0, 0x0, 0x0)

[  240.281641] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  240.315110] Bluetooth: hci5: ACL packet for unknown connection handle 0
05:26:50 executing program 7:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

[  240.700627] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  240.701572] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  240.702223] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  240.702931] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  240.703685] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[  241.790626] 9pnet_fd: Insufficient options for proto=fd
[  241.857938] 9pnet_fd: Insufficient options for proto=fd
[  242.131751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.132683] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.133937] Buffer I/O error on dev sr0, logical block 0, async page read
[  242.137624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.138141] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.138964] Buffer I/O error on dev sr0, logical block 1, async page read
[  242.153982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.154418] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.155121] Buffer I/O error on dev sr0, logical block 2, async page read
[  242.155825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.156251] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.156897] Buffer I/O error on dev sr0, logical block 3, async page read
[  242.157537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.157973] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.158658] Buffer I/O error on dev sr0, logical block 4, async page read
[  242.159289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.159733] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.160354] Buffer I/O error on dev sr0, logical block 5, async page read
[  242.160993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.161415] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.162174] Buffer I/O error on dev sr0, logical block 6, async page read
[  242.162858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  242.163289] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.163964] Buffer I/O error on dev sr0, logical block 7, async page read
05:27:07 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0)
close(r0)
syz_io_uring_setup(0x4944, &(0x7f0000000080)={0x0, 0x1761, 0x2, 0x2, 0x2d1}, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000200)="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", 0x12c)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaac4bbd925067613b6e1e198300869637aaa7aaaaffffffffffff87dd6006f62700383a00fe880000000000000000000000100001fe8000000000000000000000000000aa040090780000000060e83b5800003300fe8800000000000000000000000000adb98ead12fe8000000000000000000000000000aa00000000"], 0x0)
r1 = fork()
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1f, 0x8, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffe01, 0x4, @perf_config_ext={0x1, 0xffff}, 0x8000, 0x200, 0x9, 0x1, 0x9, 0x7, 0x100, 0x0, 0x3c5aab74, 0x0, 0x4ef}, r1, 0xffffffffffffffff, r0, 0x8)

05:27:07 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)

05:27:07 executing program 7:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0xf, [0x2, 0x156280000000000, 0x8001, 0x1, 0x7a]})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xff, 0x6, 0x81, 0x0, 0x23, 0x4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb26f, 0x3, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xc5, 0x8, 0x9, 0x174, 0x1, 0x5, 0x0, 0x40, 0x0, 0x3f}, r0, 0x10, r3, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=<r5=>0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x40000, 0x57d0364606699a81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xe}, 0xa200, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1}, r5, 0x8, r1, 0x9)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
lsetxattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0)

05:27:07 executing program 6:
openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404000, 0x0)
r0 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:27:07 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)

05:27:07 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)

05:27:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x28aa2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x7040, 0x5, 0x0, 0x4, 0x10000, 0x0, 0xe8, 0x0, 0xf3, 0x0, 0x3b5}, r0, 0x9, r4, 0xb)

[  257.651812] Bluetooth: hci2: ACL packet for unknown connection handle 0
05:27:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x100)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000040)='./file1\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
perf_event_open$cgroup(&(0x7f00000006c0)={0x6, 0x80, 0x20, 0xff, 0x7, 0x2f, 0x0, 0x9, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0xffffffffffffffa0, 0x3}, 0x48114, 0x7, 0x9, 0x9, 0x0, 0xff, 0xf0, 0x0, 0xfffffff8, 0x0, 0x1}, r0, 0xffffffffffffffff, r2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004080000000000000000000000004e02000000000000000000000000000000000000000000000000000000000000000300"/326], 0x220)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000480)="82f8dd19add46f4fd16d4654aab515aeeb438be8aeaddd32d2d9ce1c5b02bae82da9b2bbcea6e13c34da3c35182c832f22aa8f03ae2b6a87f30eeaa8fae58bf83fd164bc2b0c242a8f54c93e853de4f8a0113b0424eaa7be8afdd21774b6bbb60f9fd77b98e59980c2a4883caced1d65dcf0b8c9db61fb73003725cd3a3bb8ede5e7740b74bb2ef2a938e3e454f80ed149ed4ef97deb742d3751c6a4741e9425279d148dfa7a130580bd1866c9ca993740d3aacfcd063862c236f0468344617ed9ea5914a6c9ac08d133ca00c803344ed58bb14eba42a81af4adf9aa4cd09a3759b1c62e49", 0xe5}, {&(0x7f0000000580)="65da06517a072f71e37bfe9e8426e48cfe5a6f1aa0af2da0c01cac9061f88567d80853a3efffbc1c1a90ad5dc9277b1933818fb31f3366270ee5ba84e37349230c2c89abe30e894cb4318221ba2f3c07efa412364809fe29b8ce86275ca8aa234f15bc61f0ec0852fb3aec3e122d1f2aec5ebf2f92c6d385b1f97125a4c71772b367996ab4b65bb2a9a33e14b48db9dc991531941c8e0a0d11f0f1ec", 0x9c}, {&(0x7f0000000640)="7ed182546bb73cf746d2eb13bdf5cdce58c5e85eab019f5211528e90ee352b4a564c0f38cb01bb169d2ed18d13af5da2458c531843a819e38efe847c862ae1aea16ddcef422866cf661456f882e101976bd000ad2a71af8825c7b01e7dcf27594a3fae3eb5b1b5b1fa19b3", 0x6b}], 0x3, 0xbc2, 0x529d)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[  257.660212] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  257.663679] Bluetooth: hci5: ACL packet for unknown connection handle 0
[  257.682793] Bluetooth: Wrong link type (-22)
[  257.683641] Bluetooth: Wrong link type (-22)
[  257.684445] Bluetooth: hci3: link tx timeout
[  257.685119] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  257.730311] loop3: detected capacity change from 0 to 40
05:27:07 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)

[  257.805347] Bluetooth: hci5: ACL packet for unknown connection handle 0
05:27:07 executing program 6:
r0 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:27:07 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)

05:27:07 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

[  257.859192] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  257.881194] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  257.882506] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  257.883415] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  257.884300] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  257.885287] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  257.887228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.888603] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.889885] Buffer I/O error on dev sr0, logical block 0, async page read
[  257.891258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.892385] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.893594] Buffer I/O error on dev sr0, logical block 1, async page read
[  257.895587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.896415] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.897682] Buffer I/O error on dev sr0, logical block 2, async page read
[  257.899001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.900193] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.901402] Buffer I/O error on dev sr0, logical block 3, async page read
[  257.902750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.903695] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.904945] Buffer I/O error on dev sr0, logical block 4, async page read
[  257.906442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.907422] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.908699] Buffer I/O error on dev sr0, logical block 5, async page read
[  257.916173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.917088] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.918335] Buffer I/O error on dev sr0, logical block 6, async page read
[  257.919774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.921604] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.922823] Buffer I/O error on dev sr0, logical block 7, async page read
[  257.925032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.925935] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.927183] Buffer I/O error on dev sr0, logical block 0, async page read
[  257.928627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.929453] Buffer I/O error on dev sr0, logical block 1, async page read
[  257.930859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.931993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.933093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.934237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.935404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:27:07 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)

[  257.937754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.939008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.940128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.941227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.942423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.943609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.944768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.946011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.947219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.948807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.950365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.951619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.952830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.954052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.955271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.956589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.957874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.959282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  257.960594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.000600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.003242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.004751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.006170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.007774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.009070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.010376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.011720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.016245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.017817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.019597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.020811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.022089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.023361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.025748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.027035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.028279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.029693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.030908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.032096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.033265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.034540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.036039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.037236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.038656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.044180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.045342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.046648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.047372] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  258.048869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.050207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.051404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.052696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.054877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.056307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.057713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.058915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.060158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.061384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.062710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.063917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.065155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.066509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.067739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.068968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.069670] Bluetooth: hci5: ACL packet for unknown connection handle 0
[  258.071061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.072287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.073460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.074695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.075940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.077295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.078593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.079780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.080984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.082135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.083356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.084602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.156073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.157136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.160176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.161430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.164897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.167257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.168539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.169695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.170884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.172834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.316735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.317773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.323279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.324408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.325301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.326242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.327168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.328204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.329162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.330042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.330944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.331833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.332787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.333710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.334650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.336397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.337764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.373226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.375773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.379729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.381298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.382366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.384715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.385718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.386725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.391810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.393949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.395345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.397023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.399015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.404934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.411063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.419218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.429222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.430184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.432199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.433146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.434083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.435021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.435977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.436955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.437875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.438964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.439944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.440857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.441766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.442732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.445284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.447611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.448684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.449900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.451018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.452046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.453641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.454619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.455660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.456624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.457586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.458678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.459725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.460688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.461648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.462617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.463631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.464593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.465549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.466640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.467681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.468638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.469665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.471711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.502600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.503220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.510427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.511148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.515606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.516201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.516869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.517487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.518106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.518716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.519350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.520070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.521283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.521897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.522548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.523158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.525952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.526593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.527232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.528146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.528783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.529362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.529990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.531079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.531698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.532320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.532923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.533640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.534227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.534887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.535496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.537200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.541595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.542183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.543083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.543787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.544399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.545000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.545632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.546210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.546865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.547444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.548088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.548764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.549379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.549972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.550637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.551221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.551849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.552419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.553043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.553711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.554327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.554949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.555590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.556159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.556781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.557349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.557972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.558667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.559281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.559871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.560495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.561064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.561684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.562244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.562882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.563554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.566613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.567185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.567812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.568374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.568989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.569588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.570192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.570884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.571531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.572095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.572706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.573259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.573867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.574414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.575057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.575723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.576318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.576900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.577521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.578089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.578717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.579287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.579900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.580571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.581171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.581751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.582348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.582958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.583595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.584150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.584759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.585383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.590523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.591098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.591733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.592290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.592897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.593448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.594070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.594749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.595376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.595958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.596565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.597114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.597720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.598274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.598897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.599564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.600158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.600737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.601319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.601900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.602522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.603079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.603705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.604328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.606603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.607170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.607773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.608320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.608908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.609479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.610060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.610725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.611325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.611898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.612503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.613047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.613648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.614189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.614821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.615452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.620607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.623729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.624848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.625983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.633057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.634304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.635372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.637159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.638203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.639301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.640297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.641344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.642364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.643391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.644405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.645615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.646677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.647699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.649091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.650768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.652059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.655670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.657025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.658163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.660311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.661349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.662346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.663334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.664303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.685997] syz-executor.3: attempt to access beyond end of device
[  258.685997] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[  258.690193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.691404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  258.840681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  271.740863] ------------[ cut here ]------------
[  271.740948] ------------[ cut here ]------------
[  271.741835] WARNING: CPU: 1 PID: 314 at net/bluetooth/hci_conn.c:646 hci_conn_timeout+0x246/0x330
[  271.742701] WARNING: CPU: 0 PID: 312 at net/bluetooth/hci_conn.c:646 hci_conn_timeout+0x246/0x330
[  271.743804] Modules linked in:
[  271.744878] Modules linked in:
[  271.745307] CPU: 1 PID: 314 Comm: kworker/u5:7 Not tainted 6.1.0-rc5-next-20221115 #1
[  271.745720] CPU: 0 PID: 312 Comm: kworker/u5:5 Not tainted 6.1.0-rc5-next-20221115 #1
[  271.746684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  271.747639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  271.752149] Workqueue: hci3 hci_conn_timeout
[  271.753196] Workqueue: hci2 hci_conn_timeout
[  271.753792] 
[  271.753803] 
[  271.754337] RIP: 0010:hci_conn_timeout+0x246/0x330
[  271.754583] RIP: 0010:hci_conn_timeout+0x246/0x330
[  271.754810] Code: ff e8 ae 3f 87 fd 4c 89 e7 e8 16 bd 0a 00 0f b6 e8 e8 9e 3f 87 fd 89 ee 4c 89 e7 e8 84 f3 ff ff e9 1a ff ff ff e8 8a 3f 87 fd <0f> 0b e9 36 fe ff ff 84 c0 74 93 4c 89 ef e8 07 2d bb fd eb 89 48
[  271.755423] Code: ff e8 ae 3f 87 fd 4c 89 e7 e8 16 bd 0a 00 0f b6 e8 e8 9e 3f 87 fd 89 ee 4c 89 e7 e8 84 f3 ff ff e9 1a ff ff ff e8 8a 3f 87 fd <0f> 0b e9 36 fe ff ff 84 c0 74 93 4c 89 ef e8 07 2d bb fd eb 89 48
[  271.756042] RSP: 0018:ffff888040767ce8 EFLAGS: 00010293
[  271.758310] RSP: 0018:ffff88804053fce8 EFLAGS: 00010293
[  271.760566] 
[  271.761220] 
[  271.761892] RAX: 0000000000000000 RBX: ffff888038d72250 RCX: 0000000000000000
[  271.762112] RAX: 0000000000000000 RBX: ffff88801f8f8250 RCX: 0000000000000000
[  271.762328] RDX: ffff888010095040 RSI: ffffffff83c19cf6 RDI: 0000000000000005
[  271.763224] RDX: ffff88800ff05040 RSI: ffffffff83c19cf6 RDI: 0000000000000005
[  271.764159] RBP: 00000000fffffff9 R08: 0000000000000005 R09: 0000000000000000
[  271.765039] RBP: 00000000fffffff2 R08: 0000000000000005 R09: 0000000000000000
[  271.765946] R10: 00000000fffffff9 R11: 0000000000000001 R12: ffff888040767db0
[  271.766846] R10: 00000000fffffff2 R11: 0000000000000001 R12: ffff88804053fdb0
[  271.767770] R13: ffff88801f8f8258 R14: ffff8880181cf000 R15: ffff888016a60900
[  271.768668] R13: ffff8880349d8258 R14: ffff8880181cf000 R15: ffff88800f878c00
[  271.769573] FS:  0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  271.770424] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  271.771332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.772318] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.773321] CR2: 000055879c8c3628 CR3: 00000000161a4000 CR4: 0000000000350ee0
[  271.774045] CR2: 000000c00068f000 CR3: 00000000146a2000 CR4: 0000000000350ef0
[  271.774789] Call Trace:
[  271.775691] Call Trace:
[  271.775704]  <TASK>
[  271.776597]  <TASK>
[  271.776928]  process_one_work+0xa17/0x16a0
[  271.777252]  process_one_work+0xa17/0x16a0
[  271.777578]  ? __pfx_process_one_work+0x10/0x10
[  271.777871]  ? __pfx_process_one_work+0x10/0x10
[  271.778368]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  271.778911]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  271.779507]  ? _raw_spin_lock_irq+0x45/0x50
[  271.780078]  ? _raw_spin_lock_irq+0x45/0x50
[  271.780776]  worker_thread+0x63b/0x1260
[  271.781336]  worker_thread+0x63b/0x1260
[  271.781984]  ? __kthread_parkme+0x15e/0x220
[  271.782530]  ? __kthread_parkme+0x15e/0x220
[  271.783071]  ? __pfx_worker_thread+0x10/0x10
[  271.783597]  ? __pfx_worker_thread+0x10/0x10
[  271.784199]  kthread+0x2f1/0x3a0
[  271.784749]  kthread+0x2f1/0x3a0
[  271.785359]  ? __pfx_kthread+0x10/0x10
[  271.785939]  ? __pfx_kthread+0x10/0x10
[  271.786425]  ret_from_fork+0x2c/0x50
[  271.786870]  ret_from_fork+0x2c/0x50
[  271.787432]  </TASK>
[  271.787932]  </TASK>
[  271.788429] irq event stamp: 19175
[  271.788917] irq event stamp: 17237
[  271.789253] hardirqs last  enabled at (19185): [<ffffffff812e396c>] console_emit_next_record.constprop.0+0x64c/0x800
[  271.789582] hardirqs last  enabled at (17247): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.790085] hardirqs last disabled at (19194): [<ffffffff812e398b>] console_emit_next_record.constprop.0+0x66b/0x800
[  271.790549] hardirqs last disabled at (17256): [<ffffffff843daf8f>] sysvec_apic_timer_interrupt+0xf/0xc0
[  271.792041] softirqs last  enabled at (17782): [<ffffffff8118221b>] __irq_exit_rcu+0x11b/0x180
[  271.793250] softirqs last  enabled at (17034): [<ffffffff8118221b>] __irq_exit_rcu+0x11b/0x180
[  271.794731] softirqs last disabled at (17455): [<ffffffff8118221b>] __irq_exit_rcu+0x11b/0x180
[  271.795908] softirqs last disabled at (17025): [<ffffffff8118221b>] __irq_exit_rcu+0x11b/0x180
[  271.797155] ---[ end trace 0000000000000000 ]---
[  271.798202] ---[ end trace 0000000000000000 ]---
[  273.851576] Bluetooth: hci3: command 0x0406 tx timeout
[  273.852595] Bluetooth: hci2: command 0x0406 tx timeout
[  273.852641] Bluetooth: hci0: command 0x0406 tx timeout
05:27:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000001d80)=""/236, 0xec}, {&(0x7f0000001e80)=""/83, 0x53}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x5, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x40}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4309}, r1, 0x9, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=<r2=>0x0)
r3 = fork()
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000001d80)=""/236, 0xec}, {&(0x7f0000001e80)=""/83, 0x53}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x5, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x40}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4309}, r4, 0x9, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x7}, &(0x7f0000000180)=""/189, 0xbd, &(0x7f0000000380)=""/238, &(0x7f0000000480)=[r0, r1, r2, r3, r4, r0], 0x6}, 0x58)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r5, &(0x7f0000000300)='./file1\x00', 0x8a041, 0xf)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000340))

05:27:25 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)

05:27:25 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

05:27:25 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

05:27:25 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
[  275.120291] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  275.125042] Bluetooth: hci4: ACL packet for unknown connection handle 0
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)

05:27:25 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0)

05:27:25 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)

[  275.165333] Bluetooth: hci5: ACL packet for unknown connection handle 0
05:27:25 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
tgkill(0x0, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x21, 0x6, 0x0, 0xa34, 0x93430, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xe8, 0xffffffc1, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100003e2b80ab87", @ANYRES32=r1, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"])
syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0, 0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0)
close(r4)

[  275.196204] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  275.208237] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  275.209640] Bluetooth: hci4: ACL packet for unknown connection handle 0
05:27:25 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

05:27:25 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)

[  275.275762] Bluetooth: hci0: ACL packet for unknown connection handle 0
05:27:25 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)

05:27:25 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

05:27:25 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0)

[  275.307130] Bluetooth: hci5: ACL packet for unknown connection handle 0
05:27:25 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)

05:27:25 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2e}, "7a114675d9e3636d4d14f78a55bb93e470644fe82cf55e65f32493bcc0ed942c790b46ac0e731150e2cf5a327650"}, 0x32)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x60}, @l2cap_cid_signaling={{0x5c}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xfff7, 0x8}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x3f, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xcec2, 0x80, 0x5, 0x1}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x3, 0xe7}}, @l2cap_conf_req={{0x4, 0x6, 0x2e}, {0x3ff, 0x9, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe, 0x1, 0x7ff, 0xfff9, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x1, 0x1}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x65)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x135}, @l2cap_cid_signaling={{0x131}, [@l2cap_move_chan_cfm={{0x10, 0xf2, 0x4}, {0x3, 0x5}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x1, 0x6, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x91, 0x4}, {0x8, 0xff7f}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x5, 0x9, 0x2}}, @l2cap_conf_rsp={{0x5, 0x81, 0x42}, {0x3, 0x3, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0xb6a3}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0x101}, @l2cap_conf_flushto={0x2, 0x2, 0x7ff}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x100, 0x5, 0x5, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0xff, 0x9, 0x10000, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3ff, 0x1f}}, @l2cap_info_rsp={{0xb, 0x8, 0xa9}, {0x1ff, 0x7, "330ee5ffa62f18aee83cc5141274eab80f3692178e2b818b0185ea0f360f4c6db24e4d1a21612915ba074f4af01712cf324c520c747a5db6f4cb6a31f3bfa36eef50a25bbb6774beaa4c1269a8118ff86c5866c89fb1683ef57392b11b6c00192e9018031563fe32abba7730db6518802c1c38e5cc3a421ac449dd649d16ea08f76e5ea99a7dbaf7b9822c632a5c030a091ca85accf7034fbeab783d7fb62913d39b95d285"}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x612, 0x7f, 0x81, 0x3f}}]}}, 0x13a)

[  275.355614] Bluetooth: hci2: ACL packet for unknown connection handle 0
05:27:25 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0xe1, 0x16}, {0x4, 0x101, 0x3, 0x6, [0x1, 0x5, 0x57, 0x3bdd, 0x400, 0x100, 0xa38e]}}}}, 0x23)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd0}, "d47fd8030cb899f092c1f16a04837b220fe36120b26314afe422a4e95c5f86c71f7065854622fd48c254b8be0782fc192e673b4f9886ba46321d15c12346a3b8f1599d634da70681364146423f4a41585109fe13118916204a95d664bacec03be8a326b3bdbac3749fd398a73aa45e48dadd8de610c645f93de682cab1d5c21cebe1f44e178a54456e4cdc2a26b69713ab677fe4a724a6f531c62ddbd987e4de3d1aa51244ef16b063f67fff7ab59d799fc8f30964a049dd451d22393a9733d07f774dcfcfba3e2c6930122fdee7933f"}, 0xd4)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x40, 0x2}, {0x7}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "94715d5fd305b57ab4799b45b47733dce9"}, 0x15)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x6, 0xa}, {0xd124, 0x7ff, 0x4, 0x2, 0x1}}}}, 0x17)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x20, 0x5}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x3, 0x1ff, 0x3f}}, @l2cap_conf_req={{0x4, 0xd2, 0x8}, {0x8000, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1f, 0x3, 0x9, 0x1}}]}}, 0x3a)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x3}}}, 0xd)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x13, 0xc9, 0x4}}}, 0x6)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x86}, @l2cap_cid_signaling={{0x82}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x3}}, @l2cap_conf_req={{0x4, 0x3, 0x31}, {0x8, 0x8001, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x20, 0x4, 0x6, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0x9, 0xc40, 0x2, 0x40}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x3d35, 0x609c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x0, 0x1, 0x7, 0x96}}, @l2cap_conf_ews={0x7, 0x2, 0x20}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_mtu={0x1, 0x2, 0x986a}, @l2cap_conf_ews={0x7, 0x2, 0xf50}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xfbff}}, @l2cap_conn_rsp={{0x3, 0x40, 0x8}, {0x2, 0x4e, 0x4, 0x1ff}}]}}, 0x8b)

[  275.478880] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  275.486974] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  275.513422] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  275.622034] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  275.622700] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  275.623153] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  275.623643] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  275.624145] blk_print_req_error: 334 callbacks suppressed
[  275.624153] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  275.634541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.635430] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.636735] buffer_io_error: 351 callbacks suppressed
[  275.636750] Buffer I/O error on dev sr0, logical block 0, async page read
[  275.638509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.639248] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2
[  275.640373] Buffer I/O error on dev sr0, logical block 1, async page read
[  275.641315] Buffer I/O error on dev sr0, logical block 2, async page read
[  275.642250] Buffer I/O error on dev sr0, logical block 3, async page read
[  275.643179] Buffer I/O error on dev sr0, logical block 4, async page read
[  275.644132] Buffer I/O error on dev sr0, logical block 5, async page read
[  275.645093] Buffer I/O error on dev sr0, logical block 6, async page read
[  275.646065] Buffer I/O error on dev sr0, logical block 7, async page read
[  275.647987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.648386] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.648986] Buffer I/O error on dev sr0, logical block 0, async page read
[  275.650182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.651210] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.651840] Buffer I/O error on dev sr0, logical block 1, async page read
[  275.653237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.654253] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.655800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.656186] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.658421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.658837] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.659883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.660263] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.663008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.663413] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.664505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.666504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.669194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.670008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.673180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.674034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.675205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.676384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.678436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.680573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.681716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.682877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.684095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.684912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.685740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.688027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.688884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.691193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.691987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.693389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.694540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.696822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.698512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.699274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.700135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.702272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.703161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.703956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.705055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.706272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.707147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.708072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.709149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.710088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.710912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.712020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.713259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.714141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.714971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.716923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.717749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.720311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.721113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.722008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.723127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.724200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.725019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.731675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.736338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.742738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.749555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.755543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.761621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.771315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.777149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.786925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.790325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.792793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.793930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.794796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.796048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.796846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.797640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.798428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.799286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.800320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.801230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.803901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.804585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.805333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.806118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.806894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.807916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.809001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.811932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.813778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.814566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.815760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.817610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.818443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.823913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.958809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.967116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.974572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.983282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  275.994601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.004784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.010184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.015350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.022339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.025648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.026581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.027518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.028367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.029785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.030713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  276.031686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  277.948541] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
05:27:21  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88800ff05040
RSI=ffffffff812e690a RDI=0000000000000001 RBP=ffff88804053fa40 RSP=ffff88804053fa08
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=000000000000004f R13=ffff888010095040 R14=0000000000000200 R15=ffff88804053fa90
RIP=ffffffff812e690c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe5b54688000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe5b54686000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000c00068f000 CR3=00000000146a2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=3830353737373933346d68732d72656c
XMM02=6f6f6c2e29636f72502a282e6e69616d XMM03=00000000000000000000000000000000
XMM04=000000c005e6a038000000c005e6a000 XMM05=000000c005e6aab8000000c005e6aa80
XMM06=000000c005e6ab28000000c005e6aaf0 XMM07=000000c005e6ab98000000c005e6ab60
XMM08=000000c005e6ac08000000c005e6abd0 XMM09=000000c005e6ac78000000c005e6ac40
XMM10=000000c005e6ace8000000c005e6acb0 XMM11=000000c005e6ad58000000c005e6ad20
XMM12=000000c005e6adc8000000c005e6ad90 XMM13=000000c005e6a5e8000000c005e6a5b0
XMM14=000000c005e6a658000000c005e6a620 XMM15=000000c005e6a6c8000000c005e6a690
info registers vcpu 1
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff824780e5 RDI=ffffffff87dc29e0 RBP=ffffffff87dc29a0 RSP=ffff8880407676a8
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001
R12=0000000000000034 R13=ffffffff87dc29a0 R14=0000000000000010 R15=ffffffff824780d0
RIP=ffffffff8247813d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe23ec5b0000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe23ec5ae000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055879c8c3628 CR3=00000000161a4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff0000000000000000000000 XMM01=636f6c63006b61656c6d656d6b2f6775
XMM02=0000000000ffffffff00000000000000 XMM03=0000ff00000000000000000000000000
XMM04=ffffffffffffffffffff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000