on handle 200 [ 352.519861] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 352.595309] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 352.608424] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:11:18 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 18:11:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18:11:18 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040207d6faffffff0000"], 0xa) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x19) 18:11:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140000001800ffff00fffffffffffffff9000000"], 0x14}], 0x1}, 0x0) 18:11:18 executing program 1: mlock(&(0x7f0000871000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x5) mbind(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r4, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@local, 0x2e, r4}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x29, 0x1, 0x9, 0x3, 0x49, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x0, 0x4}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r4, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010102}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) fork() [ 352.716951] Bluetooth: hci6: Malformed Event: 0x02 [ 352.724090] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 352.724952] Bluetooth: hci6: Malformed Event: 0x02 18:11:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:28 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:11:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:28 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 18:11:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xa) listen(r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x29, 0x1f, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x25dfdbff, {0x8}, [@HEADER={0xc}]}, 0x20}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4740909b7f3fa67de5f7cef958d7d24968de7b58c016beb817c3794ee97969c4b782443cef9eaacfcef6eb2e88b1e99c35a4a991ceabb9749ca841bc58b447764c1e68177184cea359237d0f52c9b66a7081ab1e58d9be", 0x57}, {&(0x7f0000000080)="afc38bfd61e1c9832228b9dcf10555c3175d85de8954a8ce2f5c5800994421de6e4868", 0x23}], 0x2, &(0x7f0000000140)=[@flowinfo={{0x14, 0x29, 0xb, 0x800}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r6}}}, @hopopts={{0xf8, 0x29, 0x36, {0x5c, 0x1b, '\x00', [@generic={0x1f, 0x2e, "83f7da520ed1d6d93f235df65527ac947ce17c2b77e9b3a4636601e9e599d154f499baf946db0d2505a855344d76"}, @pad1, @generic={0x3a, 0xa5, "8e42e6987bc9cbe4ad316b51ef653474cf70b0bb3dad49ffcfe0f92cd41a8f4df55414278ac0d64c6cc2a5d68d40cb28f1f7f77e84324ec2a15278f09c68807522672b40d028e8c459c92d5ddd51106f759fc0715f592fbdf1ba49ca98757e910dd37985a2ff900b02f1989fe4bf83fe1977bf86f371e6e229bd1958bf480a9458664213e6bf071cc70aa46388af8180cc8d0986b67f657f2598ca55d152fd039920ee33de"}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x11, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x188}}], 0x1, 0x44) 18:11:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r1, 0x5323, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000100), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="0a903f9e884276c3d847e0020536785238d6a2638f8d02657907042fff8514e8a32f578c698606e64bf770e62918d7c3a373db50337e2e97ac29130f87d0439600a5001455542673af65d9ff9156a188c56b9f97b1085fc334e01cf7b0420448957277c664df8feefdeb20d99fb58e2f4404795ea0d0e965b2f4745ce317747e70f4848b8529fbb2a0b4df31ff92d503b3499187433f29bae27872182372f0ecf87285205b5aa2297bcd17ad4c33bf2e8a60a9409183c7", 0xb7}, {&(0x7f0000000140)="b990aea02a2df48da0dc3dcc3c6d203d69ffd93cc62399d92afc557243144dae72a53b2eb7bd5ffc34ecb341161e29251b3046adabe67ac1cff354367e831713b794eb26", 0x44}, {&(0x7f00000001c0)="d3168eb33d4ed416eb9208013625694dac9b80335c56e7253bb7eaf56e9a4c292ff2e9a62e1ced158f8d60787eb782a2bc9ffc966a4729a296866f1c368d143ccd8166d1f850a58cf89fbfa2cef10ac0ee75a0d356b31f82679813f884f067c4a256fb5d32", 0x65}, {&(0x7f0000000240)="6fdf19cb7464791aabd3ad8923c677d26025678d025dd9e604e39242ad77d197d76a7213b1b320a98af1aa7d78196adba97bdfb6d9ac28be720b063c7ae649e97ee57092559f75e1e0dc52bfacbffc230bd1a31f2f3d04ac03b9e4fa8f7c856047f0e9a8ca0b2096f6e0df46525452dd59fb495c73fb4b328a6062e51cee56660f6f92595f775e0ad4447f8a749aa1a04590d992366c429e", 0x98}, {&(0x7f0000000300)="27f92ff87e6bb97bc433771a43ef65abc3eaa4dc20d06d476bc17dc59f3929dc027bc52872c7f02a403c1ec62fd297ea521c25e0ff53416e3214f68c7267416302", 0x41}, {&(0x7f0000000480)="331fc51a4528b2529a931602ea2f461d2b91495f6e9586fc9a008dfde24a198b6763699d4a71d6283d6705e5885f9755d19d9ede9ee05d07a971383d34900a116f42464f8065c6004cc2541611714424faaae7f2425648b4c6aa9e46ffa3ecc8cfb4a80c36576271935e09bc0f9c3d1a2a067595b3969e35e759a640314e9bbde743e47159ae5e810825615ab4e4f42e7ad4a3d3001d497b151b8266094105f407bd8afbdc3176ae95c312a3a20fd7d0cfd9289304494c70d090f49fd92c9d156e", 0xc1}, {&(0x7f0000000580)="0c5264f7a247508cc5efce533c38fb671cee616ba7e4cba277ff58c41a89cf478331e4169eca357f4e459012d6e46d2b59f7f97ec264bf4a2b683a4f051a83881cdefa714e425b969a80dbdfd5eab3b04054361826b121c94038045c09bd9a4a9694ffd4a83681c15a38323ec61e4e5f0ce5be00582f50ac13a44cade55ffd175c5662ffc3486dcfa87bb9aca8f5b262850d7902cece29260e6116d01d996a8ac0336009a33b4a729db3c36f3068c8a19126bf2614e95967efeb65d689091f410a1710b8e1bb073064f8c56d1d0dab7273b6874586ebb8a4072cb58c06", 0xdd}, {&(0x7f0000000380)="85b43ef20606c600de22ace09d829c40d5885a3521a1ca4f1e8858c04eb44abbe8a4be2e50ade2b44b9928c0213f5b120d4a5611fa5c2b4b1b41752f9a2d21a431270ff86288c411f5cb52361e15d32cba7e7d17a1ff2c1b9b3d9cf6224676c68bd155045306e449bec609da9496f416bf892098804984828fc978594b8e6677e3b86e7a078c5ce4b4e415242d7705050c13599e0dd212833c1f61a406b6498e9b2aabeed2ef1aa2c839844c0127ce302b53e3d56705ac", 0xb7}], 0x8, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="e7be21681eb92a1af93bc06e0a34af645d2cd739b7d407db02c9164b50af36edd7890ecd69059da4", 0x28}, {&(0x7f0000000800)="cbeb7c95468fd39837f9ed942a5ed9eb5ba283c6c44afd5186daa688f7ee1402e656100406b1b5c06ccc5e375cb6e02f1070ef043e0122c27aa32413e4eece53fbc059f3a810af5e302d13dab3a2ce2a720d6ccf4bd97b10d741269447a5bd755cdc7793877301682380c3e0d1d549715e1db59246f582664423165fd32fd4e40da92fadfcbe8937f129f868435160c9cc31378874e2a28695a96d529239460b03898a67", 0xa4}, {&(0x7f00000008c0)="0f25c43118c29b46f0025012d87f1d504bc15186c5b7ae114c5ab289fffcb0906c1e1bd8318af19365eff5054821f912f8d068a72ddec6e38613342596713f43158367e20298e9a1b77a1ab22a61c7e339503c85a23001112b2c1b6d49a07898bd6fd60c41e716ea79673a1be45de721fa585e0ed7ed914dc451322c8ce6055515613fbb628f27520cc854741eb078246b48b2524aef01bd0ce49c77d54af686d6006da92bd9e4cdf1ffdc5edc90e9e638b9664eb4a403c05683335c211a06c220cf0692d377fbf1579e1dfdb7ef9a814bbe357b1f0b1cf18be78db7e2b3eb27aa753c859e23e524a037", 0xea}, {&(0x7f00000009c0)="80297807b508cbf7945eed9d66c2547eff3a6d73dc99fc7437dbf80d14de1e205b9b6e732fbe457b9c442b0f685c9ba03ef60108ba3b5912229b63f6617fdf000402bda3", 0x44}], 0x4}}, {{&(0x7f0000000a80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="60354d64a26a97f859ce", 0xa}], 0x1, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1f}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0xf, 0x6d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x28, 0x3, [{0x0, 0x6, "4955ec27"}, {0x0, 0x6, "5574a526"}, {0x0, 0x9, "5bcae8c117fd03"}, {0x5, 0xd, "ba2e4cb817095c93d365ac"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xef5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7176}}], 0xa8}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c40)="89c18bfed8aeae210368a45aee181c6cd7d5ec4b01fbd791f6e4d5ada24d99506a8df1382060913670553088a935c8e27e9a638860abd292a0577b4a45b5022d441af55154e98c71a6945c0392f4f29f1650e6b6892c1eeee196c05c462bd19a2c41f68070a0902cdcbe8d39aecdbe256dfca4d7fae4fe1c709e33362ae61111cdd08e8c92a594c7bafc4fb1905b", 0x8e}, {&(0x7f0000000d00)="83f4f81361063f653d8aa4136d202a89198590b218346d7a84d3e6b6fbc59c6b2e0e79c297bed92eaffc68cbf2f082caee8a556c082a1f1894b8baaa25161d01c0fc8262dbc92865a05e159f9ba9bfea2f5de34425cadc74dd4491732b4c47f2646319f0d2f860cf8c8c5dda7c407ee80b6042404f2692e126c12dba88b6d81eb11498c72d23cdd17b8d0fa3a06b675b", 0x90}, {&(0x7f0000000dc0)="2f9d73acdcec6bacae10f6c42a4f5ae338fcbf6dc65a3c684110847c87825bba0c9308f3aca7199b194b47d6a4400c4cef71e743604015a8c1c86f11ab3241719d17e400a2ccbd6bd183b170bd116697b7b368d5ad053795efb698b5bacbe9423dbd397c1cab0ca712c3e28648a9c99ba070c4b522556bc3e14fa0a50ed5ae03616ffda77d5b3e925f4ec6324d257c7bf231f734717d4176ac73256fe0795cc14056947a6bde44390c8a2d87ca4b7da660cc3d7883bbff4fb303f4fecb09d00e76c9c2ea62bef27aaf046d13332f87c38eb3a39d1fed75247ede0b89c2073805d181dfae4a408616a62f686825b7643447c8f57b06864c7e", 0xf8}], 0x3, &(0x7f0000000f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8d7}}], 0x18}}, {{&(0x7f0000000f40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000f80)="c270d859b0f1bfecb41b443dcad8f3bfb46d64d929dd5a9ae80bfd8f057077b4128e285fc4ff62968fdad198303ee5fa9e93ebac049b04c0de3447e7977d436d75a8dbe5787a60b86bd31cfdaf4a86f848ead82bdd", 0x55}, {&(0x7f0000001000)="b799174f1e544aee104fd9d397f5515c15f026a03efa1e852ce16a497f59feb7d4eeb6f6f48b38307f5dde3d3eb885be31e8f37343a5ed1b835ed4f3ffb7ef436a99926b845056a63e7304199f146e1f1e9cfb5859d80f4cf593f875d36c90aade758482bf02e3707d092727ec6305e7cf2ef72cb8c03adcc2201e22f3d32b20437a76b7d180fa9d8f5b0e5d47a9520897b23356af0dd03c71e70e10bf41f6a378f2f34c306bfbb179ed969ca6c36a86dc7f45c910f836c11f9fe5b59d4164ea39fb0ea9a0e3c8c5b815", 0xca}], 0x2, &(0x7f0000001140)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001180)="20f1baea4c67f882adc906121d6b656739143ea42c4590207a8fade1e02185c850242870af30fd6b58928382b7b5b0336745cef14e342099aad860ddf604fc80ed330f9da4ec9567ac8ae9906d70", 0x4e}, {&(0x7f0000001200)="271ac626e599e93866294f158000abfba98a086fa1a605dadb5da183590bd92b94a6a6dc1f535d55c78e13dfba8fb02546273102a4e4a421f4787f10aab64ee0964ee04b84845a31c363536d248683667ec353ae027b1ca934b26cd4f7929b", 0x5f}], 0x2, &(0x7f00000012c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x70, 0x3, 0x9, [{@multicast2, 0x9}, {@local, 0x7}, {@private=0xa010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x80000000}, {@multicast2, 0x168d}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xd8}}, {{&(0x7f00000013c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001400)="e05b64e2787b398f79e5c48b6bd5ac34f96f856a23098a01ddab9aacb0753cfbab017df1e97b249866ae8f638a82f217b559ca6eb58c69ab8aeb53edfa42992b3ef5e1655e709ccb69c1f6d830fc93f1688827ca9a83b507551eccf59797afe19d303a3869be553a4932a8ef1691e4fd73097d827f346de15efa6b94c644b32765bf70ba803d61f41a51f017fd7d16bc6edba37e81c65a4de881b345a76fe5a15dfdaa8c689636f485d2cac3468e6acc412b524928940dddac45ac47358332e363248f525eb9022555d82472945a9df599ec600f0dc754cb72e7dccc79f4", 0xde}], 0x1, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x1, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x6}, {@multicast2, 0x1f}]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x9, [{@loopback, 0x401}, {@local}, {@loopback, 0x4ace5161}, {@multicast1, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}], 0xa0}}, {{&(0x7f0000001600)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001640)="357cbc9bfc024dcb9435cd21007a174facbd3c1b998679e33d485dbbc00737308cc747ba84b50a24edb95fc629e04292f88e725d39553f0d8e7006e59bb3543afab9b612f19ddfa9ccabbe1c84810ca8375fbbca5d943f73467e4d2253f080a42ae87b423d768f0d1e67cce6446222b8cf6358ed5a48064bae4c599147f22a07e44eb4d7a2ffa80280c12a87798bf1bd05a3a830c66dc5c8cbb632c2db99dce88f2f", 0xa2}], 0x1, &(0x7f0000001740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xa2, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xf8, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6e}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xf4, 0x3, 0x6, [{@empty, 0xfffffffc}]}, @lsrr={0x83, 0x1b, 0x21, [@multicast2, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xe3, 0x1, 0x2, [{@multicast2, 0x4}, {@remote, 0x9}, {@local}, {@multicast1, 0x1000}]}, @timestamp={0x44, 0x10, 0xe3, 0x0, 0x0, [0x3a3d, 0x512, 0x94]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x9, [{@multicast2, 0x8}, {@empty, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x18}}}}], 0x130}}], 0x8, 0x40000) 18:11:28 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 18:11:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) [ 352.750790] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 363.290582] Bluetooth: hci6: Malformed Event: 0x02 18:11:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:29 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 18:11:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) [ 363.453482] Bluetooth: hci6: Malformed Event: 0x02 18:11:29 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:11:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000002340)={0x0, ""/4101}, 0x100d, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001180)={{0x2, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(r1, &(0x7f0000001340)={0x2, "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"}, 0xfd1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback, 0xffffffff}, 0x1c) 18:11:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESDEC=r0], 0xa) 18:11:40 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) 18:11:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:40 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4, 0x0, 0xffff, 0x9}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xffffffffffffffc1) [ 374.829659] Bluetooth: hci6: Malformed Event: 0x02 18:11:40 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) [ 374.866890] Bluetooth: hci6: Malformed Event: 0x02 18:11:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:40 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:11:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:40 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x0, 0x5}}}, 0xa) 18:11:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:11:40 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="951c64e245bc9fb5f73bfd1a38d50466985958b34b2e8a40"], 0xa) 18:11:49 executing program 1: write(0xffffffffffffffff, &(0x7f0000000080)="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", 0xa40) 18:11:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:11:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 18:11:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:49 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x5, 0x80, 0x72680ba4}, {0xfff, 0x6c, 0x81, 0x3}, {0x3ff, 0x8, 0xc6, 0x6}, {0x4, 0x6, 0xfc, 0x80}, {0x2, 0x0, 0x5, 0x3}, {0x6, 0x3, 0x4, 0x1}]}, 0x10) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:11:49 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:11:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:49 executing program 7: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0200001500113697aa06e1b75215cc8ca9c08520b90600010007"], 0x1a) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x192, 0x1, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_create_chan_rsp={{0xd, 0x80, 0x8}, {0x1, 0x0, 0x7ff, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0xb3, 0x2}, {0x800}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c90085146df20e229bc291b02687c8855d2029b9b03b87fb1d99da57c53b92e9916f69a870f76df470be490a133dce2c4412bfcbad2a7619feb905f1a63b88bd93440299fe20c04119cc4075461c48508cc61d0a874d7932d878d30fb30d2c2d40203870b1b79105e5b4fb8bf86d47504fa04b2630034a29482d5016632910186f8f3573dfa90cd909c0d83a3c"], 0x89) syz_open_procfs(0xffffffffffffffff, 0x0) [ 383.555195] FAULT_INJECTION: forcing a failure. [ 383.555195] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.556263] CPU: 1 UID: 0 PID: 5147 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 383.556283] Tainted: [W]=WARN [ 383.556287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 383.556295] Call Trace: [ 383.556299] [ 383.556304] dump_stack_lvl+0xfa/0x120 [ 383.556332] should_fail_ex+0x4d7/0x5e0 [ 383.556351] _copy_from_user+0x30/0xd0 [ 383.556367] copy_msghdr_from_user+0x88/0x150 [ 383.556387] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 383.556406] ? __pfx_perf_trace_lock+0x10/0x10 [ 383.556425] ? lock_acquire+0x15e/0x2f0 [ 383.556449] ___sys_sendmsg+0xdc/0x1b0 [ 383.556467] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.556483] ? perf_trace_lock+0xb5/0x5d0 [ 383.556499] ? __pfx_perf_trace_lock+0x10/0x10 [ 383.556513] ? irqentry_exit+0x3b/0x90 [ 383.556533] ? lock_acquire+0x15e/0x2f0 [ 383.556546] ? __fget_files+0x34/0x3b0 [ 383.556558] ? find_held_lock+0x2b/0x80 [ 383.556576] ? __fget_files+0x203/0x3b0 [ 383.556587] ? lock_release+0xc8/0x290 [ 383.556603] ? __fget_files+0x20d/0x3b0 [ 383.556621] __sys_sendmsg+0x150/0x200 [ 383.556638] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.556657] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 383.556678] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 383.556699] ? ksys_write+0x1a3/0x240 [ 383.556712] ? __pfx_ksys_write+0x10/0x10 [ 383.556730] do_syscall_64+0xbf/0x360 [ 383.556743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.556756] RIP: 0033:0x7f3fd3d4cb19 [ 383.556765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 383.556777] RSP: 002b:00007f3fd12c2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.556789] RAX: ffffffffffffffda RBX: 00007f3fd3e5ff60 RCX: 00007f3fd3d4cb19 [ 383.556798] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 383.556805] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 383.556812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.556819] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 383.556837] 18:11:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) [ 383.615445] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 383.618025] Bluetooth: hci6: ACL packet for unknown connection handle 402 [ 383.622209] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 383.623310] Bluetooth: hci6: ACL packet for unknown connection handle 402 [ 383.707737] FAULT_INJECTION: forcing a failure. [ 383.707737] name failslab, interval 1, probability 0, space 0, times 1 [ 383.709493] CPU: 0 UID: 0 PID: 5164 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 383.709529] Tainted: [W]=WARN [ 383.709536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 383.709548] Call Trace: [ 383.709556] [ 383.709565] dump_stack_lvl+0xfa/0x120 [ 383.709606] should_fail_ex+0x4d7/0x5e0 [ 383.709638] should_failslab+0xc2/0x120 [ 383.709665] kmem_cache_alloc_node_noprof+0x79/0x690 [ 383.709699] ? __pfx_netlink_insert+0x10/0x10 [ 383.709738] ? __alloc_skb+0x2ab/0x370 [ 383.709774] ? find_held_lock+0x2b/0x80 [ 383.709819] ? __alloc_skb+0x2ab/0x370 [ 383.709849] __alloc_skb+0x2ab/0x370 [ 383.709882] ? __pfx___alloc_skb+0x10/0x10 [ 383.709920] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 383.709966] netlink_alloc_large_skb+0x69/0x150 [ 383.710012] netlink_sendmsg+0x676/0xd80 [ 383.710061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.710113] ____sys_sendmsg+0xa67/0xc20 [ 383.710142] ? copy_msghdr_from_user+0xfb/0x150 [ 383.710187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.710224] ? lock_acquire+0x15e/0x2f0 [ 383.710257] ___sys_sendmsg+0x10f/0x1b0 [ 383.710295] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.710330] ? perf_trace_lock+0xb5/0x5d0 [ 383.710365] ? __pfx_perf_trace_lock+0x10/0x10 [ 383.710394] ? proc_fail_nth_write+0x97/0x220 [ 383.710429] ? lock_acquire+0x15e/0x2f0 [ 383.710457] ? __fget_files+0x34/0x3b0 [ 383.710482] ? find_held_lock+0x2b/0x80 18:11:49 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="01f71efdd63614b92d000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) acct(&(0x7f0000000080)='.\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1102077060d26256724eb4b60000000000"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:11:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:11:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) [ 383.710516] ? __fget_files+0x203/0x3b0 [ 383.710541] ? lock_release+0xc8/0x290 [ 383.710579] ? __fget_files+0x20d/0x3b0 [ 383.710615] __sys_sendmsg+0x150/0x200 [ 383.710651] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.710693] ? __pfx_ksys_write+0x10/0x10 [ 383.710727] do_syscall_64+0xbf/0x360 [ 383.710750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.710772] RIP: 0033:0x7f3fd3d4cb19 [ 383.710790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 383.710811] RSP: 002b:00007f3fd12c2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.710832] RAX: ffffffffffffffda RBX: 00007f3fd3e5ff60 RCX: 00007f3fd3d4cb19 [ 383.710846] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 383.710859] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 383.710872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.710884] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 383.710916] 18:11:49 executing program 3: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xe, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:11:49 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:11:58 executing program 0: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:11:58 executing program 3: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040207000000000000000d64b50aa2adf5ffb53d06f71b98f8d84ce0b93c20c5219c2cb53b89ce2ba73ed284967a1127609fe52f2bc1167ab2a33f33f84e5530cbaf242d526400ffa0c272e9acf38fb72e4af56c584a438ddfb3e2ffea3dfa2940af45a6ccea1448dd901d787845ca0dc6224b73c7ac3012c9ec615e7a3d20c360eab8de0c313be93bd5bc0344fd27b3359fdc9261488d4dcc522861e0f1f193ace71beea66f4d5aa74def7c2c1c51f27c990541169465bbac120aaf0756ed4eadb4c8d0242476f0ff7defa8"], 0xa) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0x8}, {0x9, 0x3, [0x80, 0x3]}}}}, 0x15) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_info_rsp={{0xb, 0x7, 0x101}, {0x1, 0x0, "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"}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0x1}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0xfffa}}]}}, 0x11a) 18:11:58 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x69) mknod$loop(&(0x7f0000000580)='./file0\x00', 0x6000, 0x0) 18:11:58 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="63d2e4a60e000025b2da26b0b1606a00"/25], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:11:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:11:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) 18:11:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 18:11:58 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) 18:11:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) [ 392.933330] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 392.939033] FAULT_INJECTION: forcing a failure. [ 392.939033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.940058] CPU: 0 UID: 0 PID: 5193 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 392.940077] Tainted: [W]=WARN 18:11:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000044) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000b0ba0000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="030000000400000000000019", 0xc, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}], 0x0, &(0x7f0000000880)=ANY=[]) [ 392.940081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 392.940089] Call Trace: [ 392.940094] [ 392.940099] dump_stack_lvl+0xfa/0x120 [ 392.940124] should_fail_ex+0x4d7/0x5e0 [ 392.940142] _copy_from_user+0x30/0xd0 [ 392.940158] copy_msghdr_from_user+0x88/0x150 [ 392.940182] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 392.940201] ? __pfx_perf_trace_lock+0x10/0x10 [ 392.940220] ? lock_acquire+0x15e/0x2f0 [ 392.940237] ___sys_sendmsg+0xdc/0x1b0 [ 392.940254] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.940270] ? perf_trace_lock+0xb5/0x5d0 [ 392.940287] ? __pfx_perf_trace_lock+0x10/0x10 [ 392.940300] ? proc_fail_nth_write+0x97/0x220 [ 392.940316] ? lock_acquire+0x15e/0x2f0 [ 392.940329] ? __fget_files+0x34/0x3b0 [ 392.940342] ? find_held_lock+0x2b/0x80 [ 392.940359] ? __fget_files+0x203/0x3b0 [ 392.940370] ? lock_release+0xc8/0x290 [ 392.940386] ? __fget_files+0x20d/0x3b0 [ 392.940403] __sys_sendmsg+0x150/0x200 [ 392.940420] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.940439] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 392.940459] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 392.940490] ? ksys_write+0x1a3/0x240 [ 392.940504] ? __pfx_ksys_write+0x10/0x10 [ 392.940522] do_syscall_64+0xbf/0x360 [ 392.940534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.940547] RIP: 0033:0x7fd6ee062b19 [ 392.940557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 392.940568] RSP: 002b:00007fd6eb5d8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.940580] RAX: ffffffffffffffda RBX: 00007fd6ee175f60 RCX: 00007fd6ee062b19 [ 392.940588] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 392.940595] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 392.940602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.940608] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 392.940625] [ 392.946459] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:11:58 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x9, 0x20}}}, 0xc) 18:11:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:11:58 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1029}, @l2cap_cid_signaling={{0x1025}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x9, 0x100}}, @l2cap_info_rsp={{0xb, 0x1, 0x1004}, {0x82, 0x7, "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"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x100}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x8}}, @l2cap_move_chan_req={{0xe, 0xc2, 0x3}, {0x7, 0x29}}]}}, 0x102e) 18:11:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) [ 393.066424] Bluetooth: hci6: Malformed Event: 0x02 [ 393.109570] Bluetooth: hci6: Malformed Event: 0x02 18:12:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r1, r0) 18:12:09 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x40, 0xc8, {0x5, 0x6, 0x8, 0x7, 0xd0}}}}, 0x17) 18:12:09 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) 18:12:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b6000000", @ANYRES16=r1, @ANYBLOB="08002abd7000ffdbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c82420e", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000000010004000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 18:12:09 executing program 0: syz_emit_vhci(0x0, 0x0) 18:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 18:12:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:12:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 18:12:09 executing program 0: syz_emit_vhci(0x0, 0x0) [ 403.450551] Bluetooth: hci6: Malformed Event: 0x02 [ 403.462578] Bluetooth: hci6: Malformed Event: 0x02 [ 403.479451] FAULT_INJECTION: forcing a failure. [ 403.479451] name failslab, interval 1, probability 0, space 0, times 0 [ 403.481269] CPU: 0 UID: 0 PID: 5237 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 403.481307] Tainted: [W]=WARN [ 403.481314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 403.481328] Call Trace: [ 403.481336] [ 403.481345] dump_stack_lvl+0xfa/0x120 [ 403.481390] should_fail_ex+0x4d7/0x5e0 [ 403.481424] should_failslab+0xc2/0x120 [ 403.481454] kmem_cache_alloc_node_noprof+0x79/0x690 [ 403.481491] ? __pfx_netlink_insert+0x10/0x10 [ 403.481527] ? __alloc_skb+0x2ab/0x370 [ 403.481558] ? find_held_lock+0x2b/0x80 [ 403.481599] ? __alloc_skb+0x2ab/0x370 [ 403.481629] __alloc_skb+0x2ab/0x370 [ 403.481661] ? __pfx___alloc_skb+0x10/0x10 [ 403.481697] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 403.481740] netlink_alloc_large_skb+0x69/0x150 [ 403.481780] netlink_sendmsg+0x676/0xd80 [ 403.481822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.481872] ____sys_sendmsg+0xa67/0xc20 [ 403.481900] ? copy_msghdr_from_user+0xfb/0x150 [ 403.481934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.481971] ? lock_acquire+0x15e/0x2f0 [ 403.482002] ___sys_sendmsg+0x10f/0x1b0 [ 403.482037] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.482069] ? perf_trace_lock+0xb5/0x5d0 [ 403.482102] ? __pfx_perf_trace_lock+0x10/0x10 [ 403.482128] ? proc_fail_nth_write+0x97/0x220 [ 403.482159] ? lock_acquire+0x15e/0x2f0 [ 403.482193] ? __fget_files+0x34/0x3b0 [ 403.482216] ? find_held_lock+0x2b/0x80 [ 403.482249] ? __fget_files+0x203/0x3b0 [ 403.482271] ? lock_release+0xc8/0x290 [ 403.482302] ? __fget_files+0x20d/0x3b0 [ 403.482337] __sys_sendmsg+0x150/0x200 [ 403.482370] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.482415] ? __pfx_ksys_write+0x10/0x10 [ 403.482452] do_syscall_64+0xbf/0x360 [ 403.482476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.482501] RIP: 0033:0x7fd6ee062b19 [ 403.482519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 403.482541] RSP: 002b:00007fd6eb5d8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.482564] RAX: ffffffffffffffda RBX: 00007fd6ee175f60 RCX: 00007fd6ee062b19 [ 403.482580] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 403.482594] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 403.482608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.482622] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 403.482657] 18:12:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) 18:12:18 executing program 0: syz_emit_vhci(0x0, 0x0) 18:12:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:18 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0xfeff, 0x0, 0x0, 0x544, 0x8001}}}}, 0x17) syz_open_procfs(0xffffffffffffffff, 0x0) 18:12:18 executing program 3: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000011c0)={{'\x00', 0x2}, {0x1}, 0x120, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="3d214ce8f7416ba4698c73a8e8a3e3eb16d5c5593c6a123043ab53c49658befe3804b8ab7a421030ac65ab8c56367f5e7526abcd3a89dc6e19a3b3b9f41a84010b55bfef782504d36ea6246787cffef7ef7556e043e3ebff2a7d41339c52334dff9e289b1c839c2db211d33a2631f8d9fc9e49ac6819064abdd4ac9647a9356e", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x7c, {0x1, 0xc, 0x12, "ae79a05d630bb4986d42b5244458b2de1c64", 0x5d, "0004a40e203f3541100fcd5352747b909320cd465ee5fd5cbf260109b8950e5606f33c41837f58d715b462414ec7bf46361c6d5d3926cfddb59420b35dc104cb123db3c4cdd7da07a449106384697f8bea9ab5a8e57ee5f1bc18d96a45"}, 0x1000, "514ae794de9ff1b87b9467ff54e7f1446449aa59eb30cba5cde974b463fce93f94ab1d69fd4ef45183d8a6074de5db57463fde6a33d109ce44e3a0d54f341e89377488a37d6131608b8049902ab00cdb595644bb58a6ad30da17ae29ffd918cb9a5bf228a347de94cfc008362b6d113fcef325b075ef281afbf2320665f3121c1c95f2d7760cbbde78740d9912e79d8d11e80e1878a0f3ed6f357db39b069c414b9b01ba16c0f7d0d1a64f65ebc8b1b0a9c18de15752a28d62487f202e72a9159c8174656429fb7f5bc7bd1ad190b6788d2e163d990496be458346fc3dc24dd3244aa18cc6f3232a0201187c1d7be33ada3642597453dfaa3419e7b0224bedffd662633683f9c41e1e4655fbc09bc577db140fae47690ba15e5c185f8ea6eeffeff6345bced69ee67687eab67c26392314502198e17252f6657ecaac0f517da8080ce134c9dc10bba357932daa6e7f6c05f06cb0b1dbbdb7ee3088be3520b5764d332722e596c8fa18d2591ace69668c7482ffd513b91ca3ee0c2b1a676f196403644ce3afaef3e1c5763542371158bea972cb7235eb3367acb2feea082b8a50470503921983f6b2dce75b818609acc1a8d26affb205364db015893a641646f2e34513c02f56f0ca287ecb1b4ee0837d50c3b26c3f61c7442bc4e1c4648f65620fd5d74bab6cb7a97c23d859aab762ab3730ff39fa08a9476f5ab4f69982a4413adfdb5179b38921ba43e63b0396c67e93f62fa99469f621dd44475fb356a91c7ecf505031c7c1e2b612be59ad556535360c649295f4a67b9b0ba79d133e2b05365204e666b84c599aaf8f2e3078d00992a3c18a1a47c20178bc30fe7236c1d1b7ed854a4fa294384b5630dca626651abff88c1353b13b95e48d87bc16b8a8fa3891ecfc23070ba07c9413790043c65fa4e1cf7fb4b87d38c5664c8477559a9032321549d3674cbfe8f543289a1407e4a78cc15b39c7b4d0ca8a115b5b9fd5461c9afa0d469099060eb84bb5a8765514e608f589b05871ecbd5a85300f60fda013429b2979fa3f3fb9395df4ac011d764b1eed50ec9f5926dff9d6735f47f8ad4638eb15faf1d97aeebfc09fbf4a324d02c8c132a31c41eb693a6414adacac63ff075c93d28fe852e89b5e19f06ace364b940ce954c8860766fd0efb1bfb298a7fd7992b85b81fa87db488c519f678063c79ab783945638072825fb1791e78a76bf6d94583de66e048ceb7f19938ad9de5c69bcdb35a44f29463b5bf8294265411f4535be9f297b11cce4303e350dcbd4b592acd6e76fe711f474023ca7deccf6c8615985cc474218f5893f6f3f6c2a0819ee2c724901f3bf070b47849508a5418ceaea6f101c1cda224a4dfc4c22c49c91c700ec76334871339d3b325c1db587932eca538a3393763f29dbc41681ea712dfb4d115ac62ebf2b72365203651647c4eb006d3e252360d3b7b5d7d0c08a080b1389d1a313f898f77f925b5053d16921689f08994e669693456b2f5312afc26b2749bf49ad41416c960c3a955cdde0c23e0b8560c72022a3e56b9b27da660bb7f1193342e008e0331aa2148bd37b3e517ca242bc2671ec459be62473f9c0b9e9a9f6eae7aff44258f2d6b4743542c6d3617cd94753dfa0453bc6214e7c95c617686e94f8f6d33bdc46c56410f55130f4f3f9186bbcf9820ae75719c9b867f732d102fe01ec6ecddc056062cb5c7798d06e8316ab8c96a91204c5a9fae6b4a4ca5e102582d97a65a2ae0bb986dbd64dab5199416d304b01b26b3d3f6ec207f3948b1a05db5dcfe9daf771412dcf851d928288838616c4ae136e0be7a271bf9f03daae9ce87b31cc01e96d7fc5253253b7bbf7f2db4374d41db2da29b0a1a241f889f3948fa80a4c3ef646613f3d13d3fc1dbee9634da8d4e73be0cc4c6cb18fcf973cd57b03352fb00b1b500ab2bed99a6940b850da9ee4dc4d06a6c7b0a3a7ba64a6e416daed058286d6b0ff4a29b13fa2d72fe97cce8e084a91ed5167aa0c1791f6c951a7ca3f7134ed85e3d714933faa20ca26f38eae7458a854db916918cbac779d7e93c421b7f5fee8f1442f1754d73930e47ff0eba95b2f03eda52ac4029d49b8caeab5ece46e0ceefc5037c3ea000cbf4f0dfb3749e2dc40b752a08be0583880a144423f75c4a7d50e2bb8c064fe10e65d2d76b5631a56a0ad47c7aefbbef4d18579c5cba95af290e057c33c79fe39ceb9055564065fe5b99299b1c41ab8987e2613b4a87148e5263776393560b2dd8dd8232e49661aca6ce329ae41cf392f19af81fcd4571d9de43162b4767ad0047b0a9e6418d775d2fc2084bac9fd143ae3dc496386647e9866fa9919d500497d30227d61704afdb639d39f0c94d8896220cd2ace2b241475273a2f586c3a1327679081ca7e14ecc0155059e2dc9448dd63aa2fd3b1c9266d242856dfca957dff33c3e07009bd9e2a72e2b20e18c14bb220d0e8b249ee800fa349206bfe257f76810c9a9afb18ba9f4b6b92164f3c48a505a62239c78e1f46fd360883a57fe960943d9ad65d16ccde619d7612fba167fc12c2cbeb52cad37d220d24e0a81d8ed5a06e1c22d7d06f04ed87a4fc9d8a9a23cc98236af80212097c8578d76d25b3f9f5ae71257713ae8843e84f69ddb08ab8b8db980d0930e76be82c783730c457bcb5207430103253053055f0f1c841297cecf63c6a660234e5a81152d87275e5071627412d81394e9859189cdb026f03ee0ce82cc99076915ee576f772f8a29762c57e75ffa56704e0c193ebbf27f366f8a26ac5a18a79304ccac81f237d35d5012e4e4914b00edfcd24d4dbfe8a3f3c52060ea0e60290945f19bd1c734dbba86b9b9daf66ca94806d511ae32c73902c48d838d6da1c3006307322803555e95d02cbf924d0be102664129e9f214f41f776df37f1cc8e5315b5cfa5cc9d67c2eaa8d082b3a794ade9e76ac727f8f3355747a08b13f91745dd5df14dcf68d6ad974962ca936aa4daee52c0cf35f4c7b56e349b49f0a09b4bbb83867fa10fdecbc16115e6525d70139798193ff41732ffc929423ef63fd96b34f3f588292d7bc68ae825e24ba070c5f7ee8831c316f32b0e533d39ebf9aeda2e74dfcf41c24bc53c81b62006762fbb310e321f15393231d1a112576b4a46c2f4e91234486239f807d1f330cede79005c2c6d4f82d9109170b8dd77b1cf893e9736b7cdfea10ed3ac7c74836021310056de32b8b9a14bc72dc938b65bca8adf09a7a780634f6696c793d95a0344fef8f01b90cd155cc9aec6b0bcfbcce699d47d5a9c796e69b6cd312b4abfb80b8a2c7d889871b3d55eb3750b89b9450d9624ad9d209b33262e72abe8544b261f11d1d528b983540e951f429cff95045ae8c421db98d942db74a115f27236104dc7681a1d210c829cb136c7e433d1c1a5185390c9953e209c34b1d569976e61de004870127b9a74b6b815ea5780495d43b282df64740119204ca72503f1ae5f631d5d52725d1f391f82c68df56d4e2d1fa70717292aba56560d99fe86d186878b8ca9c8354f032600b35364f4c83fab34e0bdf6044db027f54f05a886e02e953308c7c6e05f5499010012c1b964a14d0097c25f4c452a2bb243e329f337aeb601318fbfdb4b834f8b42cd8f69feaf0b9dce2f35cae3bff092829eaff50ef6008ce56991a23f7867f898f31f4729eb95caac2e8b9735b4e4f190f72f10a929200f9216920ea813c7b6c65abb74112b15324f1812585b39b8b9f7e2220e861465b26b1f38446a37fa921d6c27f53a7402ae90dd1de9c2ed99fa5f9bef9866e7896643023b0b90cd2713c18bf975f4ab677913ed9661603af35b545f6f5d1213a4022e90e59033a9f5d0e5aaebb04de25eeaaed8d0e8e20e2f07eb542793dbbfab9d234eaf20592ed18955c6b330b5d7b660e6b19dbdbd6830a1c74e4b8ad703d01c0ad8ac8e4600d72b205d58d5c0dc28341d273ca6af9126d4c64c9477d97b177cbbc8c0915b6a636de415843c5aa2e90cc42678d20f83f589834aaf72aacd7d749e2a5b931a76991123f3578d7cb0c599bb7ca059602e2976dc456f93ca9a0cc6caf2fcbe5fff5630c8bec057d704f3aaeeabce399f0b632e4d8dee94de2470042b4f33b32560967258bea2eefa530aff86e869c4bdd891a16f5e9762a4e27f8cdb1e65b65b86b2f8add4976951abf52f9af09f6b96c3f355867d644db11aba795af9065fe4b449987a96ec5ee2167e8cc6406c8e6986757a820bad5df66e301652b8f601e574aad04ea3385b75ad64b3e0c408346e89bb063b2b305a9f17a5c6b966d41948322ef8b7b195dbc4245792aeda3d108f6f3113c255615a84103f35916f9999b5e8b0a9ab444201c6068ace83d2e1fb4ba1b060f7d2ac65b2d22e75b68c6bc7e53594a8ece84f77b245f26e32942e9953327be816cc8a47bc01f3ce51826cffbe092f29899dfed435179a94991a3f41e87ba1aa13e2a207f69d06253aae7719ccee96b5ebdce7ed33d9b23e33610a176315f3191108b3a1e50adfe059288a994d25c12a947e95b14e4aad2bab56a5ab6b408853efdce5409281bb97462cff378f5e8ab9a041f18578d64cf9816d515199ad7e318a9ca5627347d8d9abfe94d6b6641892e6b9f0e7c1f90cc0e36092b8ef8f7f0a6c2e4b9f42ff13a7c62bcf98f1859d8c8234a124f5f690c9a44fc834544b9d7348170ea7ff78367623947a70ca854026cebe05bf4cd30ade1e72588ba7d4e0abfdc2e82dc161a3be1d22f34b1a2d3b0637bb13623d79431537443a293025d76be73873168b92620d36ef1274aa2a5dac357fa25b13e44600f59e291c90d4dde5762e15c84f5c84566d69bb9aac4be995bfa82efcaaef99ca5bb37076adb2681a009b5f82aab15e50589f04149dfc37271c68862062aa949b6d0971eac7669c9d600402605b5b11681ea804f59ac1814102a024bc45863caa3304569e42e27cd8478ed6cfa9e8da7848b51076c2201fc6f03d8b9fc57e475fc215c352af580587e17e1ca5ca4185d7df4926fe4fa2782cdf0387ad4b481eaea85597566ce4eb23f9f682523fb07febb2baafbcf8ade4081a3475f0ce6e04fcb69012e3f73fffc2227c1c0c1d7ce95d8704744df042a52f5f262e5ddb26259482155761c4d52376317805a279d33ffc7c0b6d826b5f1e9f1d8d04474ad32500d7740f91d3eb4e2ff1a6da266b4319d7708f37eef5518e8939c82fdbceda1b08295f64f74c6cbcd1686c0de1ded9654056c78b65bc326b4502400301d8ad1f90e47728675709d45df3a6a042325678e61dc9f92fe3e690262b6ed84777e5ffba825de9fd714c6ba533b4a82b595bbb6748ba2e237ce99868a52f6c0aa95c171de942dc739cb54920cfb3ef609a955ea0784cbf00786082a9f6873f6ae0776d212e84e4924ec7f667f9c4441a2f06df54dba79d16b4e79e8b65fb8bfb288cb9f149040c495a66ef7ea4bf96e948a747a0eb5b76d9481fd2e67c2353de051a4ddcce29bd63cd6f4d114d9ac5714cfeddebb041be48f75251b5aad29cfba91aace44c444fb1ddf8d266a62c3503bf714958a551e4ca1714021cee0756170976113849c90aefb3e5fd7c4c11f5f14d6288283b2c9a8f247762f49c8bce4b5b21fe9c9490e0bb8b83ae527d75568e943aaa467ff6fbd281b4a619cd95f1b42688576e8446e69a04c1dc0644412727940c4c5d143de896395ad22b5d52b1531ae316172ac930cbd5d4f398f404b216bbf7bc6facfd676a7fc3ec659955e4420b2f20bba9fa377667150df2a"}, 0x1088}) r0 = syz_open_dev$mouse(&(0x7f0000001240), 0x7, 0x8440) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffff89950480) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) 18:12:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 18:12:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100), &(0x7f0000000200)=0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @remote, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = accept4(r0, &(0x7f0000000080)=@l2, &(0x7f0000000140)=0x80, 0x80800) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f}, 0x1c) [ 413.364809] Bluetooth: hci6: Malformed Event: 0x02 [ 413.366011] Bluetooth: hci6: ACL packet for unknown connection handle 1 [ 413.378038] Bluetooth: hci6: Malformed Event: 0x02 [ 413.381478] Bluetooth: hci6: ACL packet for unknown connection handle 1 [ 413.405815] FAULT_INJECTION: forcing a failure. [ 413.405815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.407601] CPU: 0 UID: 0 PID: 5262 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 413.407636] Tainted: [W]=WARN 18:12:19 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x9, 0x9, 0x20}}}, 0xc) [ 413.407643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 413.407655] Call Trace: [ 413.407663] [ 413.407672] dump_stack_lvl+0xfa/0x120 [ 413.407713] should_fail_ex+0x4d7/0x5e0 [ 413.407744] _copy_from_iter+0x1dc/0x1660 [ 413.407771] ? lock_acquire+0x15e/0x2f0 [ 413.407797] ? __virt_addr_valid+0x1c6/0x5d0 [ 413.407832] ? find_held_lock+0x2b/0x80 [ 413.407865] ? __pfx__copy_from_iter+0x10/0x10 [ 413.407890] ? lock_release+0xc8/0x290 [ 413.407919] ? __virt_addr_valid+0x100/0x5d0 [ 413.407955] ? __check_object_size+0x57b/0x880 [ 413.407995] netlink_sendmsg+0x809/0xd80 [ 413.408036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.408083] ____sys_sendmsg+0xa67/0xc20 [ 413.408108] ? copy_msghdr_from_user+0xfb/0x150 [ 413.408140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.408181] ? lock_acquire+0x15e/0x2f0 [ 413.408210] ___sys_sendmsg+0x10f/0x1b0 [ 413.408243] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.408272] ? perf_trace_lock+0xb5/0x5d0 [ 413.408303] ? __pfx_perf_trace_lock+0x10/0x10 [ 413.408327] ? proc_fail_nth_write+0x97/0x220 [ 413.408356] ? lock_acquire+0x15e/0x2f0 [ 413.408379] ? __fget_files+0x34/0x3b0 [ 413.408400] ? find_held_lock+0x2b/0x80 [ 413.408432] ? __fget_files+0x203/0x3b0 [ 413.408452] ? lock_release+0xc8/0x290 [ 413.408483] ? __fget_files+0x20d/0x3b0 [ 413.408517] __sys_sendmsg+0x150/0x200 [ 413.408560] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.408603] ? __pfx_ksys_write+0x10/0x10 [ 413.408637] do_syscall_64+0xbf/0x360 18:12:19 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x60}, "10540888847474f563470d5f028660e52790a7e89243799dc6453b0ea34e9b3570d8f6d1c9e3e8a6082828f6924c350e0a52b7542ff4c4ca682998c8772840dd0215b3dc443ab9fc94b2611ce29c732539f065f3ef5e98e8470ca67178a63c30"}, 0x64) syz_open_procfs(0xffffffffffffffff, 0x0) [ 413.408659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.408681] RIP: 0033:0x7f3fd3d4cb19 [ 413.408698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 413.408719] RSP: 002b:00007f3fd12c2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.408740] RAX: ffffffffffffffda RBX: 00007f3fd3e5ff60 RCX: 00007f3fd3d4cb19 [ 413.408755] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 413.408768] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 413.408781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.408793] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 413.408826] 18:12:19 executing program 3: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:12:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) [ 413.510363] Bluetooth: hci6: Malformed Event: 0x02 [ 413.517651] Bluetooth: hci6: Malformed Event: 0x02 18:12:19 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9, 0x20}}}, 0xc) 18:12:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 18:12:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000013c0)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="80e56d"]) openat2(r1, 0xfffffffffffffffd, &(0x7f0000000080)={0x800, 0x48}, 0x18) 18:12:28 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f1b0a5352419b675ad98409d3bf76f7aa4857a085999eceff3bbe577120441"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:12:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 18:12:28 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x0, 0x20}}}, 0xc) 18:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) 18:12:28 executing program 1: [ 422.782806] FAULT_INJECTION: forcing a failure. [ 422.782806] name failslab, interval 1, probability 0, space 0, times 0 [ 422.785038] CPU: 1 UID: 0 PID: 5293 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 422.785073] Tainted: [W]=WARN [ 422.785080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 422.785092] Call Trace: [ 422.785100] [ 422.785108] dump_stack_lvl+0xfa/0x120 [ 422.785149] should_fail_ex+0x4d7/0x5e0 [ 422.785187] should_failslab+0xc2/0x120 [ 422.785215] __kmalloc_cache_noprof+0x73/0x690 [ 422.785246] ? __pfx___mutex_lock+0x10/0x10 [ 422.785277] ? lock_release+0xc8/0x290 [ 422.785304] ? genl_start+0x1e8/0x960 [ 422.785326] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 422.785355] ? genl_start+0x1e8/0x960 [ 422.785374] genl_start+0x1e8/0x960 [ 422.785393] ? __mutex_add_waiter+0x202/0x220 [ 422.785424] __netlink_dump_start+0x5fd/0x980 [ 422.785462] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 422.785488] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 422.785520] ? __pfx_genl_get_cmd+0x10/0x10 [ 422.785552] ? __pfx_genl_start+0x10/0x10 [ 422.785570] ? __pfx_genl_dumpit+0x10/0x10 [ 422.785588] ? __pfx_genl_done+0x10/0x10 [ 422.785612] ? __radix_tree_lookup+0x1f7/0x290 [ 422.785652] genl_rcv_msg+0x447/0x7e0 [ 422.785678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.785701] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 422.785746] netlink_rcv_skb+0x147/0x430 [ 422.785779] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.785803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.785852] ? netlink_deliver_tap+0x1ae/0xce0 [ 422.785881] ? selinux_netlink_send+0x507/0x880 [ 422.785904] ? is_vmalloc_addr+0x86/0xa0 [ 422.785941] genl_rcv+0x28/0x40 [ 422.785959] netlink_unicast+0x5a7/0x870 [ 422.785997] ? __pfx_netlink_unicast+0x10/0x10 [ 422.786045] netlink_sendmsg+0x8ac/0xd80 [ 422.786084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.786132] ____sys_sendmsg+0xa67/0xc20 [ 422.786159] ? copy_msghdr_from_user+0xfb/0x150 [ 422.786191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.786226] ? lock_acquire+0x15e/0x2f0 [ 422.786255] ___sys_sendmsg+0x10f/0x1b0 [ 422.786287] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.786317] ? perf_trace_lock+0xb5/0x5d0 [ 422.786347] ? __pfx_perf_trace_lock+0x10/0x10 [ 422.786371] ? proc_fail_nth_write+0x97/0x220 [ 422.786401] ? lock_acquire+0x15e/0x2f0 [ 422.786424] ? __fget_files+0x34/0x3b0 [ 422.786446] ? find_held_lock+0x2b/0x80 [ 422.786477] ? __fget_files+0x203/0x3b0 [ 422.786498] ? lock_release+0xc8/0x290 [ 422.786527] ? __fget_files+0x20d/0x3b0 [ 422.786560] __sys_sendmsg+0x150/0x200 [ 422.786591] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.786634] ? __pfx_ksys_write+0x10/0x10 [ 422.786670] do_syscall_64+0xbf/0x360 [ 422.786692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.786714] RIP: 0033:0x7f3fd3d4cb19 [ 422.786731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.786752] RSP: 002b:00007f3fd12c2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.786773] RAX: ffffffffffffffda RBX: 00007f3fd3e5ff60 RCX: 00007f3fd3d4cb19 [ 422.786787] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 422.786800] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.786813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.786826] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 422.786859] r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36313130373331373200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="200000001cc2eb501cc2eb5000000000d4f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000d4f4655fd4f4655fd4f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b698e28d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001000800000000000000010000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a20e8d2000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3631313037333137322f66696c65302f66696c65300000000000000000000000000000000000000000000015d4476a000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008851284000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c00}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d5f4655fd5f4655fd5f4655f00000000000002001800000000000000010000000d0000000e0000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2c222a9000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xc0, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c1705df1d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04073401000000002800790000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0x8001}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r1, 0x5323, 0x0) openat(r1, &(0x7f0000000600)='./file2\x00', 0x400, 0xc0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresuid(0x0, r3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) r5 = syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file1\x00', 0x20, 0x6, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0xfb, 0x3}, {&(0x7f0000000a80)="1831eebc41bc6d38c2e68a72dbb15114be0adcfde2063626c1ba7fcb78a1bc05becfcc7db3e562b036683cf4e70fff2f20200f86f060d6b52d98e4fa4fb54e81f4117bb5d607d5bac61744d051217ccf656827e3533547b0d7ed411d4628e40e55a1f9bd27d3cb348b3e2b2a95be07644824befdb5931174a3207ce53cac4ce6c5e107acaade2acd1450bdb799b87e72d83b1775c397f50861e301f640e005bd103099a02811ba13f340dde816f293c9951b9528032c5b50a6109f63d46676c09ac13d4ae3488768732df83812121589c236d76f447885ac82537fc2bf3656a2bd39", 0xe2, 0x4}, {&(0x7f0000000b80)="3f00b1d3cd305d5a8a2a503ebd5703b473aa0e4d8c4aa65502e7aa94fb081b4afede783b46b73285a2ab1893654c1bec58fad37ee206bab0c2541a49f6b82e2f7488c7abdd6c98d02c1a360ee5be3ab293e929b8ccbd27c89cd1f8e68c9113d246a5be18813119d4d77f8319cf6f7d6a4d165ccb0b0efed574512f790f1d2b588a28884687c8f36ef5748a073b8be4129f6f70909dc6a69fda815fd9ec092a3089021a0a12c006f50c820f6818cc8e831c3e44d786e584ce605a8aefa5a677e7f53dfdd11ef98c31aaed3709e3c8", 0xce, 0x1}, {&(0x7f0000000c80)="0420d8707dd8fea3d2bb6616325f85175e396e464c739dbb2efba9884c462a2d21b8293a10e139c05ae1ca8b407cdb2e1514b3fefc2742ce5d1608e065295bb7563a5a8e53c7d4126eb6133e8828fac5d0d240d40723a886824389f8f2eb767972e7b881d5cfb7eb188d7fdab4d9ab90c15f6a571a68805ea8d1ffd0619efe740740ae52f66bd58f59ac758fd19a15f25596c06b9ce7cce2357cc4a6474511c5644a4ac394c13f87083264f4bff10d1d20cc09b2713335b036dfe5d755a129038c87c33b72286f6aecc14c4e93577f90cce6c7ae6071c0b0a136c3158351cf5993b41771c159163ed293a6c8ed906554554becf643aec037557d6528128426", 0xff, 0x8001}, {&(0x7f0000000d80)="1753d0ef413c0df9644d45966d336c0f1875dce2fc6e0bd1fd231b76f2f751c788424b663fe6ffa8a0f9f341b0d3792ec8bbc4cc81805de0eb25444c9f2538fce25156e5c97c1bee81eb55efb756f32f6215c7b2a15c8f71856b937d1feb6b2feff571823104fd8c03351e90f01a483c979ae1ff9c740f01337e99918f5057b7247610ff81346c2ed162cbd9a234292d930e201f9e1e265f98ab98a81530e2d4fe7f7aa31f828cc8f7eaecf6db27278ca3f48a5fc83ed313d8d08f5dcdbb2aedde66536e9f017e959b5db3dd71810d2ea49e5535", 0xd4}, {&(0x7f0000000e80)="98a746fe51c3747d68d39cd30072678c97f4db2886bb3de0bd24b89c74532bc03d25bdbedd62ae088db0590cefa99c44a2b56f5196b929f2405fd2dad3a00327c6f5461f753a48fedefc0680ccd7f3309e855b0f1e560c5f8aab176ce42c6e594ecb9f781fa6afb002ca529e566c1ccf3284a808018ea668fe34bb7b200e595bd2c8", 0x82, 0x6}], 0x802000, &(0x7f0000001000)={[{@shortname_lower}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlate}, {@utf8}, {@uni_xlateno}, {@uni_xlate}], [{@audit}, {@fsmagic={'fsmagic', 0x3d, 0xb8}}, {@dont_hash}]}) move_mount(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', r5, &(0x7f00000010c0)='./file0\x00', 0x13) setresuid(0x0, r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000a00000018000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB='./file1/../file0\x00']) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) lstat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r9, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="3873cf94734228a9c64d19d3bedd36b40d9e7686d64aafa949471067da192e26d08c3e79d478011e80732934cd881bc4ade461374abd2b2059346331b82032a0ae32d6bc405ddd32715a6df4bc48855e2ed95c", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="040001000000000008000000", @ANYRES32=0xee01, @ANYBLOB="100002000000000020000d0000000000"], 0x64, 0x7) chdir(&(0x7f0000000740)='./file1\x00') 18:12:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207000000000000004d53810b96b9d764157a82b3dd2764bac2d24dcbc19065f9eebf1486fb1f0ec9b2c1d0371b47e0fe8b845dbfa16e63488fa036393f2d3a83cce070b2269054ca27a7fc12772f70a4d828e6f5447eda46c922e482e8b1e7aa7f2134c1aaa12cbdf81bca161c94b81ba7f98cfbddfe497b0a7cc6d07406fd7fdcc25dbeb834b15de741cf5f1bf1475ac793524f2f63c4a876b34903c70336cdea62eed0e412a0"], 0xa) 18:12:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:28 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x0, 0x20}}}, 0xc) 18:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:12:28 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x101}]}}}, 0x37) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) [ 423.023651] Bluetooth: hci3: hcon 00000000483c4ae5 sent 1 < count 257 [ 423.027645] Bluetooth: hci3: hcon 00000000483c4ae5 sent 0 < count 257 18:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:12:39 executing program 1: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x155842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01010000000000192e2f66696c6530005d257796b773235210841e2b1a8f1bdac61eef28bc3d3e9039b41df289fe55b2d68687ec68fb507e064825496ccb5b0969a8e37525ae38c5cfa8f72b41010400"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8100) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x80}, 0x100, './file0\x00'}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) pidfd_send_signal(r2, 0xe, &(0x7f0000000080)={0x38, 0x8, 0x8001}, 0x0) 18:12:39 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x0, 0x20}}}, 0xc) 18:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) 18:12:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) 18:12:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 18:12:39 executing program 3: syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 18:12:39 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="006933268e0b6f7242f88f0008fb205fe4f8a184e183c041000000000000007ed5ea92008e0100000001e0"], 0xa) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_open_procfs(r0, 0x0) [ 433.424794] FAULT_INJECTION: forcing a failure. [ 433.424794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.425808] CPU: 1 UID: 0 PID: 5324 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 433.425827] Tainted: [W]=WARN [ 433.425830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.425838] Call Trace: [ 433.425842] [ 433.425847] dump_stack_lvl+0xfa/0x120 [ 433.425872] should_fail_ex+0x4d7/0x5e0 [ 433.425891] _copy_from_iter+0x1dc/0x1660 [ 433.425907] ? lock_acquire+0x15e/0x2f0 [ 433.425921] ? __virt_addr_valid+0x1c6/0x5d0 [ 433.425941] ? find_held_lock+0x2b/0x80 [ 433.425959] ? __pfx__copy_from_iter+0x10/0x10 [ 433.425972] ? lock_release+0xc8/0x290 [ 433.425988] ? __virt_addr_valid+0x100/0x5d0 [ 433.426007] ? __check_object_size+0x57b/0x880 [ 433.426029] netlink_sendmsg+0x809/0xd80 [ 433.426052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.426078] ____sys_sendmsg+0xa67/0xc20 [ 433.426092] ? copy_msghdr_from_user+0xfb/0x150 [ 433.426109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.426128] ? lock_acquire+0x15e/0x2f0 [ 433.426143] ___sys_sendmsg+0x10f/0x1b0 [ 433.426165] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.426181] ? perf_trace_lock+0xb5/0x5d0 [ 433.426198] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.426210] ? proc_fail_nth_write+0x97/0x220 [ 433.426227] ? lock_acquire+0x15e/0x2f0 [ 433.426239] ? __fget_files+0x34/0x3b0 [ 433.426252] ? find_held_lock+0x2b/0x80 [ 433.426269] ? __fget_files+0x203/0x3b0 [ 433.426279] ? lock_release+0xc8/0x290 [ 433.426295] ? __fget_files+0x20d/0x3b0 [ 433.426312] __sys_sendmsg+0x150/0x200 [ 433.426329] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.426352] ? __pfx_ksys_write+0x10/0x10 [ 433.426371] do_syscall_64+0xbf/0x360 [ 433.426384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.426396] RIP: 0033:0x7fd6ee062b19 [ 433.426406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.426417] RSP: 002b:00007fd6eb5d8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.426429] RAX: ffffffffffffffda RBX: 00007fd6ee175f60 RCX: 00007fd6ee062b19 [ 433.426437] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 433.426444] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.426451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.426457] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 433.426474] 18:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:39 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0xffffffffffffffbc}}}, 0xa) 18:12:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) 18:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:12:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) 18:12:39 executing program 7: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="c2611a4a027884a5cd405b81b8e444045c637a62c6328215752591936359bda65b5b6ffc777d906bc53ae17d93201ac651233a84cc36fe4f128e95eebcb183e8de3bfc26c2f01b3b4bd78ce20c73f628a6e8e86f684fb660d4526106284e13e32b673c743c3d8edbb44af424f8dcd84310e0f33c7a87c976579bd8e6bb1e04ce109cce86079c00b1f5d2e6b4a8e19e75350b5c8894286224bbb4e12b4758316463396f26fbb4c0f91aba9f1eb193b23af9d50f3516d117a72dbd1d0d7bb66b00"/204], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) 18:12:39 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) 18:12:39 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}, {&(0x7f0000011500)='f', 0x1, 0xe800}, {&(0x7f0000011a00)="4552ed", 0x3, 0x10000}], 0x0, &(0x7f0000012200)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) r3 = geteuid() syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x3, &(0x7f0000000180)=[{&(0x7f0000000140)="469aa83a77f61c2fccd17a33aa08a3dc7919efb33569b83c9f23a43347866b483c583e91a2ed95483ce61f84d90d771a0b8c24a5f190e27125f648d132723577", 0x40, 0x8}, {&(0x7f0000000280)="704b7084c908c6ffa899efe0a3f0b5a70fc567086564a33573837e0c3e3402eb4964c4cf1ffabcc4ce132f499a27261150331c71629cd10ffb4ea18edc427bbed90e5fceae99ecc9ff1c11c5d6a406c87cfc7c9ae31b36eb580b1bf1629e60870862d9d0727dba455697986d29d1c7e47324ea149dd8e3539f9627a4d7c1abf67f848107dd0d3e3e3880f4e2fd81a607c32b95addf94930af1c1be8fa01ba525846063e9b29507196e23f722e6409a778c1642e29e799991f183f4c6c624ae35a175415ab3fcacff", 0xc8}, {&(0x7f0000000380)="bf91b1e7729dc2459466fe5f9d2501e9183aa7899f115c0f64892c12d4d46ea7e02b2b9bc22e1700664a8d4f1a748951fd8dd67bac42a9d542b753fb30f174a9712b1977f7a2312cba0545de294b8baaf414b2d7abed563531e3a888e10b94a1058d87e6cd686975e0609be64c5d7c1440518499a4d2d039a45f5fe71b175181de39543909edd968424329b6739b1e898cff7f17e23f5af6e556680f978ffeeae742e9817a29efafb83a42bfc092009e1eeda94f8f88976be8f091d9e9c5ac29bea6ae4dd5c1328ac2a5b01b96a4da8044d7292f066d8a729d16e3301a3ee914c9", 0xe1, 0x9}], 0x0, &(0x7f0000000540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x67, 0x33, 0x34, 0x2d]}}, {@size={'size', 0x3d, [0x39, 0x74, 0x30, 0x65, 0x30]}}, {@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0xd051}}, {@huge_always}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'iso9660\x00'}}, {@obj_type={'obj_type', 0x3d, '&/^'}}, {@uid_gt={'uid>', r1}}, {@fowner_gt={'fowner>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'iso9660\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@fsname={'fsname', 0x3d, 'iso9660\x00'}}]}) 18:12:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) 18:12:39 executing program 3: syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x31}, "895df56cba0f6cbf305d2e8f182f7f5251d6e1d2e3700f62b5e4308cc4b8e45fc4c02fd92b27578e0f251d53d31ef7ec25"}, 0x35) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x3}, "757af5"}, 0x7) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2f}, "3004c95f4369cdab40acd8ccc13ec38e84d0a448e332f25d3c941eda7a9cd965f1f2d774c3321e99c80587087be523"}, 0x33) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0x1, 0x20, 0x77, 0x9}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x5673, 0x5}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x9, 0x2}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x22d}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x7, 0x9}}]}}, 0x3c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x1f}}}, 0x7) 18:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) [ 433.759604] FAULT_INJECTION: forcing a failure. [ 433.759604] name failslab, interval 1, probability 0, space 0, times 0 [ 433.760595] CPU: 1 UID: 0 PID: 5353 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 433.760620] Tainted: [W]=WARN [ 433.760624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.760631] Call Trace: [ 433.760636] [ 433.760641] dump_stack_lvl+0xfa/0x120 [ 433.760666] should_fail_ex+0x4d7/0x5e0 [ 433.760684] should_failslab+0xc2/0x120 [ 433.760700] __kmalloc_cache_noprof+0x73/0x690 [ 433.760718] ? __pfx___mutex_lock+0x10/0x10 [ 433.760736] ? lock_release+0xc8/0x290 [ 433.760751] ? genl_start+0x1e8/0x960 [ 433.760764] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 433.760779] ? genl_start+0x1e8/0x960 [ 433.760789] genl_start+0x1e8/0x960 [ 433.760800] ? __mutex_add_waiter+0x202/0x220 [ 433.760817] __netlink_dump_start+0x5fd/0x980 [ 433.760838] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 433.760852] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 433.760870] ? __pfx_genl_get_cmd+0x10/0x10 [ 433.760887] ? __pfx_genl_start+0x10/0x10 [ 433.760896] ? __pfx_genl_dumpit+0x10/0x10 [ 433.760906] ? __pfx_genl_done+0x10/0x10 [ 433.760919] ? __radix_tree_lookup+0x1f7/0x290 [ 433.760941] genl_rcv_msg+0x447/0x7e0 [ 433.760955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.760968] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 433.760992] netlink_rcv_skb+0x147/0x430 [ 433.761010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.761023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.761050] ? netlink_deliver_tap+0x1ae/0xce0 [ 433.761065] ? selinux_netlink_send+0x507/0x880 [ 433.761078] ? is_vmalloc_addr+0x86/0xa0 [ 433.761099] genl_rcv+0x28/0x40 [ 433.761109] netlink_unicast+0x5a7/0x870 [ 433.761129] ? __pfx_netlink_unicast+0x10/0x10 [ 433.761155] netlink_sendmsg+0x8ac/0xd80 [ 433.761180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.761206] ____sys_sendmsg+0xa67/0xc20 [ 433.761221] ? copy_msghdr_from_user+0xfb/0x150 [ 433.761238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.761257] ? lock_acquire+0x15e/0x2f0 [ 433.761273] ___sys_sendmsg+0x10f/0x1b0 [ 433.761291] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.761306] ? perf_trace_lock+0xb5/0x5d0 [ 433.761323] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.761336] ? proc_fail_nth_write+0x97/0x220 [ 433.761352] ? lock_acquire+0x15e/0x2f0 [ 433.761365] ? __fget_files+0x34/0x3b0 [ 433.761377] ? find_held_lock+0x2b/0x80 [ 433.761394] ? __fget_files+0x203/0x3b0 [ 433.761405] ? lock_release+0xc8/0x290 [ 433.761421] ? __fget_files+0x20d/0x3b0 [ 433.761439] __sys_sendmsg+0x150/0x200 [ 433.761456] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.761479] ? __pfx_ksys_write+0x10/0x10 [ 433.761499] do_syscall_64+0xbf/0x360 [ 433.761511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.761524] RIP: 0033:0x7fd6ee062b19 [ 433.761533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.761544] RSP: 002b:00007fd6eb5d8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.761556] RAX: ffffffffffffffda RBX: 00007fd6ee175f60 RCX: 00007fd6ee062b19 [ 433.761564] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 433.761571] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.761578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.761585] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 433.761603] [ 433.793655] FAULT_INJECTION: forcing a failure. [ 433.793655] name failslab, interval 1, probability 0, space 0, times 0 [ 433.795748] CPU: 0 UID: 0 PID: 5361 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 433.795784] Tainted: [W]=WARN [ 433.795791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.795804] Call Trace: [ 433.795811] [ 433.795820] dump_stack_lvl+0xfa/0x120 [ 433.795861] should_fail_ex+0x4d7/0x5e0 [ 433.795894] should_failslab+0xc2/0x120 [ 433.795922] kmem_cache_alloc_node_noprof+0x79/0x690 [ 433.795962] ? __alloc_skb+0x2ab/0x370 [ 433.795992] ? kasan_save_stack+0x34/0x50 [ 433.796024] ? __alloc_skb+0x2ab/0x370 [ 433.796051] ? netlink_unicast+0x5a7/0x870 [ 433.796082] __alloc_skb+0x2ab/0x370 [ 433.796112] ? __pfx___alloc_skb+0x10/0x10 [ 433.796139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.796177] ? do_raw_spin_lock+0x123/0x260 [ 433.796215] netlink_dump+0x194/0x1200 [ 433.796243] ? mark_held_locks+0x49/0x80 [ 433.796254] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 433.796273] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 433.796306] ? __pfx_netlink_dump+0x10/0x10 [ 433.796353] ? __asan_memset+0x24/0x50 [ 433.796376] ? genl_start+0x66e/0x960 [ 433.796402] __netlink_dump_start+0x6c5/0x980 [ 433.796440] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 433.796465] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 433.796499] ? __pfx_genl_get_cmd+0x10/0x10 [ 433.796530] ? __pfx_genl_start+0x10/0x10 [ 433.796548] ? __pfx_genl_dumpit+0x10/0x10 [ 433.796566] ? __pfx_genl_done+0x10/0x10 [ 433.796590] ? __radix_tree_lookup+0x1f7/0x290 [ 433.796643] genl_rcv_msg+0x447/0x7e0 [ 433.796669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.796692] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 433.796737] netlink_rcv_skb+0x147/0x430 [ 433.796770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.796794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.796843] ? netlink_deliver_tap+0x1ae/0xce0 [ 433.796872] ? selinux_netlink_send+0x507/0x880 [ 433.796898] ? is_vmalloc_addr+0x86/0xa0 [ 433.796938] genl_rcv+0x28/0x40 [ 433.796955] netlink_unicast+0x5a7/0x870 [ 433.796994] ? __pfx_netlink_unicast+0x10/0x10 [ 433.797042] netlink_sendmsg+0x8ac/0xd80 [ 433.797081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.797129] ____sys_sendmsg+0xa67/0xc20 [ 433.797155] ? copy_msghdr_from_user+0xfb/0x150 [ 433.797187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.797223] ? lock_acquire+0x15e/0x2f0 [ 433.797252] ___sys_sendmsg+0x10f/0x1b0 [ 433.797286] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.797315] ? perf_trace_lock+0xb5/0x5d0 [ 433.797346] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.797370] ? proc_fail_nth_write+0x97/0x220 [ 433.797400] ? lock_acquire+0x15e/0x2f0 [ 433.797424] ? __fget_files+0x34/0x3b0 [ 433.797446] ? find_held_lock+0x2b/0x80 [ 433.797477] ? __fget_files+0x203/0x3b0 [ 433.797498] ? lock_release+0xc8/0x290 [ 433.797528] ? __fget_files+0x20d/0x3b0 [ 433.797561] __sys_sendmsg+0x150/0x200 [ 433.797592] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.797636] ? __pfx_ksys_write+0x10/0x10 [ 433.797672] do_syscall_64+0xbf/0x360 [ 433.797694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.797716] RIP: 0033:0x7f3fd3d4cb19 [ 433.797733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.797753] RSP: 002b:00007f3fd12c2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.797774] RAX: ffffffffffffffda RBX: 00007f3fd3e5ff60 RCX: 00007f3fd3d4cb19 [ 433.797789] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 433.797801] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.797814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.797827] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 433.797860] [ 433.827420] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 433.827553] Bluetooth: hci3: SCO packet for unknown connection handle 200 18:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) [ 433.828156] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 443.104535] Bluetooth: hci6: Malformed Event: 0x02 [ 443.108823] Bluetooth: hci6: Malformed Event: 0x02 18:12:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) 18:12:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x204, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40480a0}, 0x20008000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="58000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000008000000000e0000001ac14b900000000000000000000a2d761a3546159a729a3a3a8042400000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000939913ab84dbdb4c4779e518440363fdcd3c4b6ebe7312c006009bcccfd2605265c602afa5e9304062"]}) 18:12:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(0xffffffffffffffff, r0) 18:12:48 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040207b4b6efa943aaeb"], 0xa) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/253) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x40, 0x101, 0x6, 0x1c, 0xd3, "a3d90b3375158df8a4f1698f51029f4ecb59b2", 0x6, 0x20}) 18:12:48 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04020700000000002000"], 0xa) 18:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10) 18:12:48 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+10000}, {0x77359400}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x7, 0x94033dfa172697af, 0x9}}}, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6000001, 0x8010, r4, 0xfd75d000) 18:12:48 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0xa}, {0x6, 0x0, 0xc2a8, 0x3ff, [0x1]}}}}, 0x17) [ 443.155936] Bluetooth: Unexpected continuation frame (len 18) [ 443.158667] Bluetooth: Unexpected continuation frame (len 18) 18:12:48 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_conn_req={{0x2, 0x81, 0x4}, {0x9, 0x1819}}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x8, 0x439}}, @l2cap_create_chan_req={{0xc, 0x36, 0x5}, {0x4, 0x5, 0x7}}]}}, 0x22) 18:12:48 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04023904aaaaaaaaaa1105ff802abddb0100aaaae77fa4143e6faaaaaa1107b301f935daff07aaaaaaaaaa111281059cbdc6f7e000000000000005090063ca6803001e0f7cb94434a148e819a49fa2a1dc8a44ea757cdfcf1caa863a269852c537f0335e1676d3031d02bea265e81331ea30ca3376315831aa386796ad5cb0665b745098a506e374025e010dc5779850854500e10b"], 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:12:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x204, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40480a0}, 0x20008000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="58000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000008000000000e0000001ac14b900000000000000000000a2d761a3546159a729a3a3a8042400000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000939913ab84dbdb4c4779e518440363fdcd3c4b6ebe7312c006009bcccfd2605265c602afa5e9304062"]}) 18:12:48 executing program 7: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) clone3(&(0x7f0000001300)={0x10080, &(0x7f0000000000), &(0x7f0000001080)=0x0, &(0x7f00000010c0), {0xd}, &(0x7f0000001100)=""/180, 0xb4, &(0x7f00000011c0)=""/234, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) fork() rt_sigqueueinfo(r0, 0x37, &(0x7f00000013c0)={0x2b, 0x3f, 0x40}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001380)) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)) r3 = gettid() rt_sigqueueinfo(r3, 0x2c, &(0x7f0000000000)={0xfffffffe, 0xfffffffd}) syz_open_procfs(r3, 0x0) 18:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11) 18:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) 18:12:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) [ 443.416966] FAULT_INJECTION: forcing a failure. [ 443.416966] name failslab, interval 1, probability 0, space 0, times 0 [ 443.418679] CPU: 0 UID: 0 PID: 5404 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 443.418737] Tainted: [W]=WARN [ 443.418749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 443.418770] Call Trace: [ 443.418781] [ 443.418796] dump_stack_lvl+0xfa/0x120 [ 443.418858] should_fail_ex+0x4d7/0x5e0 [ 443.418909] should_failslab+0xc2/0x120 [ 443.418951] kmem_cache_alloc_node_noprof+0x79/0x690 [ 443.418989] ? __alloc_skb+0x2ab/0x370 [ 443.419022] ? kasan_save_stack+0x34/0x50 [ 443.419059] ? __alloc_skb+0x2ab/0x370 [ 443.419086] ? netlink_unicast+0x5a7/0x870 [ 443.419118] __alloc_skb+0x2ab/0x370 [ 443.419148] ? __pfx___alloc_skb+0x10/0x10 [ 443.419183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.419214] ? do_raw_spin_lock+0x123/0x260 [ 443.419256] netlink_dump+0x194/0x1200 [ 443.419286] ? mark_held_locks+0x49/0x80 [ 443.419315] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 443.419346] ? __pfx_netlink_dump+0x10/0x10 [ 443.419394] ? __asan_memset+0x24/0x50 [ 443.419417] ? genl_start+0x66e/0x960 [ 443.419443] __netlink_dump_start+0x6c5/0x980 [ 443.419482] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 443.419508] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 443.419541] ? __pfx_genl_get_cmd+0x10/0x10 [ 443.419573] ? __pfx_genl_start+0x10/0x10 [ 443.419591] ? __pfx_genl_dumpit+0x10/0x10 [ 443.419609] ? __pfx_genl_done+0x10/0x10 [ 443.419635] ? __radix_tree_lookup+0x1f7/0x290 [ 443.419676] genl_rcv_msg+0x447/0x7e0 [ 443.419703] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.419726] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 443.419770] netlink_rcv_skb+0x147/0x430 [ 443.419805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.419829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.419879] ? netlink_deliver_tap+0x1ae/0xce0 [ 443.419908] ? selinux_netlink_send+0x507/0x880 [ 443.419932] ? is_vmalloc_addr+0x86/0xa0 [ 443.419970] genl_rcv+0x28/0x40 [ 443.419988] netlink_unicast+0x5a7/0x870 [ 443.420026] ? __pfx_netlink_unicast+0x10/0x10 [ 443.420074] netlink_sendmsg+0x8ac/0xd80 [ 443.420114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.420162] ____sys_sendmsg+0xa67/0xc20 [ 443.420188] ? copy_msghdr_from_user+0xfb/0x150 [ 443.420223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.420264] ? lock_acquire+0x15e/0x2f0 [ 443.420294] ___sys_sendmsg+0x10f/0x1b0 [ 443.420334] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.420363] ? perf_trace_lock+0xb5/0x5d0 [ 443.420395] ? __pfx_perf_trace_lock+0x10/0x10 [ 443.420419] ? proc_fail_nth_write+0x97/0x220 [ 443.420449] ? lock_acquire+0x15e/0x2f0 [ 443.420473] ? __fget_files+0x34/0x3b0 [ 443.420494] ? find_held_lock+0x2b/0x80 [ 443.420526] ? __fget_files+0x203/0x3b0 [ 443.420547] ? lock_release+0xc8/0x290 [ 443.420576] ? __fget_files+0x20d/0x3b0 [ 443.420610] __sys_sendmsg+0x150/0x200 [ 443.420641] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.420701] ? __pfx_ksys_write+0x10/0x10 [ 443.420737] do_syscall_64+0xbf/0x360 [ 443.420759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.420781] RIP: 0033:0x7fd6ee062b19 [ 443.420798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 443.420818] RSP: 002b:00007fd6eb5d8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.420839] RAX: ffffffffffffffda RBX: 00007fd6ee175f60 RCX: 00007fd6ee062b19 [ 443.420854] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 443.420867] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 443.420880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.420892] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 443.420926] 18:12:59 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209aaaaaaaaedff000000"], 0xc) 18:12:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(0xffffffffffffffff, r0) 18:12:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000780)="e4144b377e016c6681bc324175cb3807a4432cbc55c21a9cc8be37c12a501791a8ae560c588f40ec469d28eae43c32df24a535faaf7cd6d74ce0a062c9563bd241ed995224611cc5acd3d29c24348bf178b9b03cd6d74840facea9cc0dc6187b0e0a", 0x62}, {&(0x7f00000000c0)="d3d374cb1c28a19e1cf95fb2a1a978fcc2b050f513e30733e23d540d0b5a97eb67aa193e0591dccc7d4dc36b4af481a0190f128139746fbf320cc45f68483297089dc4a2dd8ee9f6351852408494f26e07ccf52b97e3714e275b", 0x5a}, {&(0x7f0000000140)="abf83c3a87ca81df2c70bc09cf6349fe21f5aa6ae4b4200d0e78e2e4b35f2258f4c5d0672136b6b6c023896a1c6a0771407be892704261a0cdf7f44d4be065f8a2ed0875709e476e92c9bae3c2673c5c81e9fabdf12a7b03746509b3a6e171e34483907b45683f4bdf62bbcae9807f2393c49b0fe2ab0712f4fc9b4bffc038cebf1ad028f8da49f2bea360f8b69c57fef000ac8cfd51689889be33801504685676d1d47857eeb8442cfb489b8c8c16fb90573bf61c8bbc51ecb5a3bbfae69cdee5fd21f9660fef373d2c5b787c1865e30656194a0b46a169ae3b52cbde896ddf5504b4a2c119d2abe93b07", 0xeb}, {&(0x7f0000000800)="9975d3ee39a2639481fd1e084194562a21a4d3dc261889652360b3615dddba99cb2bec26e0728319420483f311998cec730725993b695a946db0406310f5f2f7877be6d56f44ffceaf01cfebe94cd016587bada2d0733e1152d7c82c148ba2217b86042329ebaa572e314549a77cd92ee4f3ad47d146e54a1ebd9c31adbab92c0e4530f5657c3854db31e6d6be41c523e29ec136553e00d9a547a8e970e0af8435bb235ecee5ab624b2527a245cef0bb003d0d8da16be6e166b3cf08", 0xbc}, {&(0x7f0000000480)="97c09a98ec9c0c80fb31e50182bd6237554b2dbcbba726db59be9c7591eb9e6a76bd73abc69e83c3bd4ac2782bc5ae9cdd342b97f029b66f40d193e167eb8ea1b5d2adda5f39269e1a2195e4b1843f430bf74f1e2ec20d172fb0a99fbc253bf308cbcb1dd09ed7697f790767e6449b31c8a525c3d78e8a8cc11fd4e04f705e5cf7366789c5b34a7cdbcee21f00951db95160d0ae7dde0c09a1ac3eebc521019e119bec6d1ca99c696aa93648175370fe0e0d277e405db0b52b365aa2015377df232c06e857b1b6fa05582d367e166119db84020b015c87b3ef0a9b547040daaccc95221aa9c8", 0xe6}, {&(0x7f0000000240)="7a733e9c36bbc1147cd7a92cd33f84f2d1deeee18507352c178226084a939662e4da18d9bb6680577b041e2868e175bf461147bd4ca7e2b779def258cb8ad1e26cb29810ddeb5fa3457c8d7cee965e0caf0965d9237c4bf4db252b437d2607d7d85b", 0x62}, {&(0x7f0000000580)="0193090c487faed89014575f4e912c4d11cc5a0688a75a24df98d3809c5f43781f2290e7b1c93ec905e658b6b633c35fc0b396acab7cdc2299d02e2bcd0f331a4ee8cad78c6c3d6874644e87b81e27e8ccd952c633bfe82041a08a9fca462d59782cc0b66fc9943433028cca5c97a6f40e09ca3af94d5eb3e0caf830b94db39be063522a51a024c10b4a67b5999047730859a1566ad87b465b5662f0d9873ebc11f1044743c5eb1d07d7d33a429f5327d9dd3c9b81fad2187d96b2241627965d5f361a1fc5c9f84e30ddb520800bc69374928e9dacf984a5a03551f12ce705fe11cac5563b1448", 0xe7}, {&(0x7f0000000680)="762a149c09f08d70945f69da5c619af9a931d6abaaa713384c31e8b2ccaf63086d8aa86311b4cd9853a4a4341bbb588c463c61d04e8e84671788c3444e8000385670f62e4ae2e396df03927867c28cc3311b2fe1f971fb9de8c2439ca59391d9a2c10d", 0x63}], 0x8, 0x3, 0x0, 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r2) pread64(r0, &(0x7f0000000300)=""/131, 0x83, 0x9) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r4, 0x5323, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$SG_IO(r3, 0x2271, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:59 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{}, {0x5, 0xc8}}}, 0xfffffffffffffdc0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="3a00010001ff0200060001ef0200000407f7f2ff03003c0010000400f300080006c0040001000180075c04005c2140000706040009000300000000000000"], 0x43) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="dd2c9cdf3d264e4e0d7760bf1fcee08d823766303ff2d3d285ab81d50658c4a6cd3a23e8e625e82f1517d2b93447b91a24618e2d1f4f19aa7f278f5a1b360a808471ec5eff04d0216bef691c519c313ad8f92659266d6acc472de308d497d00a70351a3649ba1f66c8fef74fb97dce60ddfec7add2e808a557d5df9d175cfbe3f7985f59200c4a7579609a9cdc5980f3984a62f989cc88acc7d155320381a62599b1656c09399d4fdd0d5580c15790397332bd22f52df55c2ef7c358ff64dbde10337f6b384d7442bee5ca05a2196440a6af0d18be1c6276b7c93820401e71c4dd", 0xe1}, {&(0x7f0000000180)="52faa7b3b6efc756b729bf0cd666f73ef0f8840b341f016bfbae97f223fdf0d9ac519402fb629661dccd1dd83c45136a3bc262101d32f30a94d7f0fcf8f3f1b3a2c4ec3d291d2fcc473cfd2ed2679d81b7f081fe26bd04b06f781955f2b5151994b60de644ff148d46088239d4c5ce177b94c29bbaa537777ac46666563283984397b49d7a8b477c5361f96459bd5c46c1899a14208a48207f9f57a4d8acd90946e27e49a7c6e890c7ae2f7a8bed1561bc01e0f6d0ed075727008dc6c86a7a42dc958f782ebeb19ad99ed7db206474aded79f876203e614418a6359697", 0xdd}, {&(0x7f0000000280)="9855510193d77e75a76d3295d0827690cfcb4088a492630b071d9a28dbf6764358d35745a521b5cbdd3b289ecc98dde3d1b5e6fc3c4863b7b2f06a0a20bd77d68c79b5b6d892fead0393f147a928ebe23877650631e19929d0e758f8cfa9cb0ce17ade7af0fdc32e02160cca9ace3f41bc7a63bd84eb7bcb3ba310772a61c87089b74bd7e8c23cce847d3c13dec28e8b185065d9106ebaa25218e9606571", 0x9e}], 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x3}}}, 0x4) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x200, 0x1}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x64, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x7, 0x5, 0x8001, 0xffe0}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x8, 0x9, 0x3f}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0xffe1, 0x4f}}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0xce}}]}}, 0x3c) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r2, 0x5323, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r3, 0x2f, 0x80, 0x0, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @loopback, 0x80, 0x7, 0x1, 0x80}}) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000440)=0x7fff, 0x2) 18:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12) 18:12:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10) 18:12:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) 18:12:59 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "c7fe60c23df44e6959708b8c494ce18785b68eadeacc9eca23b35ecfd9d53274496978ec991a8bb4de2e41e2c8c5ce76c0439bce1f5ecacf11924cc7d2477e1e298a8a2b8a22cca03a43d98226dd57f805d433822e80e6405175bf49dd12d848ff1ef2a31edd2d4b1001da75f71517740286c6042aa7394ede75f8d3fd0f1885d403e4a7e6f27d09e866ee53edafae9861bc4f37096c40ca76af3888e90d63b98ccb64fd134a9c748e22848e307aa2796b51519e5c7482a162bc4158e6005c7665d9af0ac1d34a28e26cc68a7b9f08d5327e1991c36f0f43e29cf8ddfec6cc8e6d25ee17d3202a113ae8f497c22085"}, 0xf3) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, ']:S', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xd) [ 453.441943] Bluetooth: hci6: Malformed Event: 0x02 18:12:59 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043209aaaaaaaaa5bbaa000009001ff40b3ad851af23f721554fe34dd36ac16cacd89b38aea7de2aa903cdac08ee95fbf628e821381f0fb81c3b43e526d74b4280d7c041eb0e980a76efcb9797d016e69b1472750986768a735c9de56d63c3b0b9ebfc933d2d4bffc9c2a5a5221e64620b2bc485ed74a16f707681633f85e7da1746007ebf2a6243ef7110dbaebb9f3790908bbfdd446df7ad9df0c8852718da867e1205bc788c4920b8a5640e28a8b213d1130c49b366a2853ea4aae4a641e88dd42cff9f659bd6d8ef0e75"], 0xc) [ 453.461380] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 453.462642] Bluetooth: hci3: connection err: -111 [ 453.481611] Bluetooth: hci6: Malformed Event: 0x02 [ 453.502424] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 453.507305] Bluetooth: hci3: connection err: -111 18:12:59 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)="c0491329db7febaee90f4211ba64ac03443ccf04a98c27e2be73c00161b2e25e1f269aae8825663b2691d4823493daca52e535a22cc5ea678512f6f6f837948c2a5c7711ca4c7a79ffe8da9d8d427560149cb9c88e8c20dc5ac3e49a6d3eb3ae6847f4dc2564f7ec2b97ef926f56addda84bb965696f9ec77dd944d83921e5316e3c60d6a5077b745bc56c83735b6da4a824cfb273af616090137933bdb7d7844232c7200ad7df3a909b84e9838da8", 0xaf}, {&(0x7f0000000180)="49954ed5b1b7c3a7a77ba4ef1a95e63fcfc8a441f37adaf5549709f328aa6905aad17f0f00aadcc99b286832e86b6f326192237d791d1ab8df8f1bbdd553ea4656c304c01ff0ea66d1559304c87b530945b7", 0x52}, {&(0x7f0000000200)="a23b33fd387450f9f3b2dd4cd2cc4067fedfd33f0d4431960435ee75369b56e9d74819e8109a07b8c6d221849bbc4d9dff8cabd6d4643f1e12aa5dda47f25a65669046d8534cb41837ba0e8d1ee4260b10f47b1af677e0f9f7d082b0993e5b657db8391f43ac01d705c29a3699972220a1724b8bfbcd47a75c00a06d0eb54dbd71323e46f0b0d55a94d94c660ada73b48462f0c163ab5c7c99c4b7dcecedb6958738db56fa0b7ef8c392da3d3d0fd56e770aa68220fef503b10659ddbdf2ebba1f1b87586067a08258c3323e998a49db15983f5760c2cd79161e0b741a470172402fc3a3b26f68b0", 0xe8}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="b061f1b1af599aebd37266743670ce7d4312387ba530c481234677ba2395fde3489401df43531662a10533013bf768efb0eac682df608272c6ce09508ce1", 0x3e}, {&(0x7f0000001340)="94120a1912bf2566b1298c934fb08118af54698b40b07190acd67253f2630dcf0c7fa3c0414eaad137ebd00c9ab3ab8156a9dde3e2252f42494dc5ff83ddea517111ec925a9f1c96482ec6f8e01c4e909ff0de4c4f60b8bfcb3c57e8281beaa9660ead7faacfb0c10bdd342133a1d57dac5c9c9cfc43b47f960302d2a69df8edf7bd68a7d22153bbb0d8ecb56cdae9dcd63e20095c4a70f43cc6d1e1f8dea90c6575", 0xa2}, {&(0x7f0000001400)="b9730b86b5c423eeaaddb1bcacc96ec74d5ea78d253567ab873f0cf9a3e1491f6a9b88f50f4dbaba7d49583f8201fecb3e", 0x31}, {&(0x7f0000001440)="3f3b3b7ca169f05cace5d959a23797ce9dfa621e6a4b90953d43d9dd1812d97d57ba4a11758364b36e2de942fd035c36ddeb8b04c8212cb522dbfb49b5d8893b98c18900ed886f74ea4bf7526798509ead15b7e111b80b8e3ba8abf83e51c46c22cab324a78fece6ffe7fcb1b0d7d92a309db27d3dc3629e1d2e339da96f449c6f3b7ff1cb3488b2c9efa74cd49b", 0x8e}, {&(0x7f0000001500)="f9ce0ea380bf40f7f85146aa3748297c669db01cf43996aa8f7c95a6334ad011e17cb1fe40da26c9b5ed6fa3a2ae7f83b470ce51d1a0644017524c89f451e018245aea3b1524f99e2da486889ee525e23f01825d97cf8fb52e7401a15c888e8e495716392a272194024b8bd36d46cb582c5b57d65c93e35b5e84435f308260a7d53d83349dbac971a4d02dadc5658415fad9797938973588ed5e01aab5a043bbd14e48aceea57258cac1e471a9eee49a", 0xb0}], 0x9}, 0x8000) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2c, 0x30]}}}}]}) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="907bbbd38adfc859d004aaaaaaaa00000900"], 0xc) 18:12:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11) 18:12:59 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0xfc, 0xc8, 0xff}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 453.566084] tmpfs: Bad value for 'mpol' [ 453.603156] tmpfs: Bad value for 'mpol' 18:13:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x97}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004881}, 0x2004c001) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:13:08 executing program 0: r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0xfffffffffffffffb) request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='dns_resolver\x00', r0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="1daace96575500000900"], 0xc) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:13:08 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@any, 0x20}}}, 0xa) 18:13:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(0xffffffffffffffff, r0) 18:13:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13) 18:13:08 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "c7fe60c23df44e6959708b8c494ce18785b68eadeacc9eca23b35ecfd9d53274496978ec991a8bb4de2e41e2c8c5ce76c0439bce1f5ecacf11924cc7d2477e1e298a8a2b8a22cca03a43d98226dd57f805d433822e80e6405175bf49dd12d848ff1ef2a31edd2d4b1001da75f71517740286c6042aa7394ede75f8d3fd0f1885d403e4a7e6f27d09e866ee53edafae9861bc4f37096c40ca76af3888e90d63b98ccb64fd134a9c748e22848e307aa2796b51519e5c7482a162bc4158e6005c7665d9af0ac1d34a28e26cc68a7b9f08d5327e1991c36f0f43e29cf8ddfec6cc8e6d25ee17d3202a113ae8f497c22085"}, 0xf3) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, ']:S', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xd) 18:13:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(0xffffffffffffffff, r0) 18:13:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12) [ 463.031103] FAULT_INJECTION: forcing a failure. [ 463.031103] name failslab, interval 1, probability 0, space 0, times 0 [ 463.032189] CPU: 1 UID: 0 PID: 5453 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 463.032208] Tainted: [W]=WARN [ 463.032212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.032219] Call Trace: [ 463.032224] [ 463.032229] dump_stack_lvl+0xfa/0x120 [ 463.032253] should_fail_ex+0x4d7/0x5e0 [ 463.032271] should_failslab+0xc2/0x120 [ 463.032288] __kmalloc_cache_noprof+0x73/0x690 [ 463.032306] ? nl80211_dump_interface+0xd8/0x7f0 [ 463.032322] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 463.032343] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 463.032362] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 463.032378] nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 463.032393] ? mark_held_locks+0x49/0x80 [ 463.032408] ? __pfx_nl80211_dump_wiphy_parse.constprop.0+0x10/0x10 [ 463.032426] ? kasan_save_track+0x14/0x30 [ 463.032444] nl80211_dump_interface+0x4de/0x7f0 [ 463.032459] ? __alloc_skb+0x161/0x370 [ 463.032481] ? __asan_memset+0x24/0x50 [ 463.032493] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 463.032512] ? __pfx___alloc_skb+0x10/0x10 [ 463.032527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.032545] genl_dumpit+0x125/0x220 [ 463.032559] netlink_dump+0x51a/0x1200 [ 463.032579] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 463.032595] ? __pfx_netlink_dump+0x10/0x10 [ 463.032621] ? __asan_memset+0x24/0x50 [ 463.032634] ? genl_start+0x66e/0x960 [ 463.032647] __netlink_dump_start+0x6c5/0x980 [ 463.032668] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 463.032681] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 463.032699] ? __pfx_genl_get_cmd+0x10/0x10 [ 463.032716] ? __pfx_genl_start+0x10/0x10 [ 463.032736] ? __pfx_genl_dumpit+0x10/0x10 [ 463.032746] ? __pfx_genl_done+0x10/0x10 [ 463.032759] ? __radix_tree_lookup+0x1f7/0x290 [ 463.032781] genl_rcv_msg+0x447/0x7e0 [ 463.032796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.032808] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 463.032831] netlink_rcv_skb+0x147/0x430 [ 463.032849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.032862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.032888] ? netlink_deliver_tap+0x1ae/0xce0 [ 463.032904] ? selinux_netlink_send+0x507/0x880 [ 463.032917] ? is_vmalloc_addr+0x86/0xa0 [ 463.032938] genl_rcv+0x28/0x40 [ 463.032947] netlink_unicast+0x5a7/0x870 [ 463.032968] ? __pfx_netlink_unicast+0x10/0x10 [ 463.032994] netlink_sendmsg+0x8ac/0xd80 [ 463.033015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.033041] ____sys_sendmsg+0xa67/0xc20 [ 463.033056] ? copy_msghdr_from_user+0xfb/0x150 [ 463.033073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.033092] ? lock_acquire+0x15e/0x2f0 [ 463.033108] ___sys_sendmsg+0x10f/0x1b0 [ 463.033126] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.033142] ? perf_trace_lock+0xb5/0x5d0 [ 463.033163] ? __pfx_perf_trace_lock+0x10/0x10 [ 463.033176] ? proc_fail_nth_write+0x97/0x220 [ 463.033193] ? lock_acquire+0x15e/0x2f0 [ 463.033205] ? __fget_files+0x34/0x3b0 [ 463.033217] ? find_held_lock+0x2b/0x80 [ 463.033235] ? __fget_files+0x203/0x3b0 [ 463.033246] ? lock_release+0xc8/0x290 [ 463.033262] ? __fget_files+0x20d/0x3b0 [ 463.033279] __sys_sendmsg+0x150/0x200 [ 463.033296] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.033320] ? __pfx_ksys_write+0x10/0x10 [ 463.033339] do_syscall_64+0xbf/0x360 [ 463.033352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.033363] RIP: 0033:0x7f3fd3d4cb19 [ 463.033372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.033384] RSP: 002b:00007f3fd12c2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.033396] RAX: ffffffffffffffda RBX: 00007f3fd3e5ff60 RCX: 00007f3fd3d4cb19 [ 463.033403] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 463.033410] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.033417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.033424] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 463.033442] 18:13:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13) [ 463.105925] Bluetooth: hci6: Malformed Event: 0x02 [ 463.119429] Bluetooth: hci6: Malformed Event: 0x02 18:13:08 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x62}, @l2cap_cid_signaling={{0x5e}, [@l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x400, 0xa020, 0x3, 0x6}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7, 0x1}}, @l2cap_conf_req={{0x4, 0x81, 0x3e}, {0x9, 0x1, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6, 0xfd, 0xfff9, 0x5, 0x4b51}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x6, 0x1, 0x3, 0x7ea}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x1, 0x7eb, 0x10000, 0x8df, 0x50dcb3a5}}, @l2cap_conf_flushto={0x2, 0x2, 0xd9b}]}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x8, 0x3ff}}]}}, 0x67) 18:13:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 14) [ 463.208663] FAULT_INJECTION: forcing a failure. [ 463.208663] name failslab, interval 1, probability 0, space 0, times 0 [ 463.210409] CPU: 0 UID: 0 PID: 5466 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 463.210443] Tainted: [W]=WARN [ 463.210451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.210463] Call Trace: [ 463.210471] [ 463.210480] dump_stack_lvl+0xfa/0x120 [ 463.210521] should_fail_ex+0x4d7/0x5e0 [ 463.210553] should_failslab+0xc2/0x120 [ 463.210580] __kmalloc_cache_noprof+0x73/0x690 [ 463.210613] ? nl80211_dump_interface+0xd8/0x7f0 [ 463.210641] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 463.210678] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 463.210715] ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 463.210744] nl80211_dump_wiphy_parse.constprop.0+0x97/0x590 [ 463.210772] ? mark_held_locks+0x49/0x80 [ 463.210799] ? __pfx_nl80211_dump_wiphy_parse.constprop.0+0x10/0x10 [ 463.210833] ? kasan_save_track+0x14/0x30 [ 463.210865] nl80211_dump_interface+0x4de/0x7f0 [ 463.210893] ? __alloc_skb+0x161/0x370 [ 463.210930] ? __asan_memset+0x24/0x50 [ 463.210954] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 463.210989] ? __pfx___alloc_skb+0x10/0x10 [ 463.211016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.211049] genl_dumpit+0x125/0x220 [ 463.211073] netlink_dump+0x51a/0x1200 [ 463.211110] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 463.211140] ? __pfx_netlink_dump+0x10/0x10 [ 463.211195] ? __asan_memset+0x24/0x50 [ 463.211219] ? genl_start+0x66e/0x960 [ 463.211245] __netlink_dump_start+0x6c5/0x980 [ 463.211282] genl_family_rcv_msg_dumpit+0x1b6/0x2b0 [ 463.211308] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 463.211341] ? __pfx_genl_get_cmd+0x10/0x10 [ 463.211372] ? __pfx_genl_start+0x10/0x10 [ 463.211390] ? __pfx_genl_dumpit+0x10/0x10 [ 463.211408] ? __pfx_genl_done+0x10/0x10 [ 463.211432] ? __radix_tree_lookup+0x1f7/0x290 [ 463.211472] genl_rcv_msg+0x447/0x7e0 [ 463.211499] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.211522] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 463.211565] netlink_rcv_skb+0x147/0x430 [ 463.211598] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.211622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.211671] ? netlink_deliver_tap+0x1ae/0xce0 [ 463.211700] ? selinux_netlink_send+0x507/0x880 [ 463.211724] ? is_vmalloc_addr+0x86/0xa0 [ 463.211761] genl_rcv+0x28/0x40 [ 463.211779] netlink_unicast+0x5a7/0x870 [ 463.211817] ? __pfx_netlink_unicast+0x10/0x10 [ 463.211865] netlink_sendmsg+0x8ac/0xd80 [ 463.211905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.211953] ____sys_sendmsg+0xa67/0xc20 [ 463.211979] ? copy_msghdr_from_user+0xfb/0x150 [ 463.212011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.212046] ? lock_acquire+0x15e/0x2f0 [ 463.212076] ___sys_sendmsg+0x10f/0x1b0 [ 463.212109] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.212138] ? perf_trace_lock+0xb5/0x5d0 [ 463.212170] ? __pfx_perf_trace_lock+0x10/0x10 [ 463.212194] ? proc_fail_nth_write+0x97/0x220 [ 463.212224] ? lock_acquire+0x15e/0x2f0 [ 463.212248] ? __fget_files+0x34/0x3b0 [ 463.212269] ? find_held_lock+0x2b/0x80 [ 463.212301] ? __fget_files+0x203/0x3b0 [ 463.212322] ? lock_release+0xc8/0x290 [ 463.212351] ? __fget_files+0x20d/0x3b0 [ 463.212385] __sys_sendmsg+0x150/0x200 [ 463.212416] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.212459] ? __pfx_ksys_write+0x10/0x10 [ 463.212495] do_syscall_64+0xbf/0x360 [ 463.212517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.212539] RIP: 0033:0x7fd6ee062b19 [ 463.212556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.212577] RSP: 002b:00007fd6eb5d8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.212598] RAX: ffffffffffffffda RBX: 00007fd6ee175f60 RCX: 00007fd6ee062b19 [ 463.212613] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 463.212626] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.212638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.212651] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 463.212685] 18:13:08 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "c7fe60c23df44e6959708b8c494ce18785b68eadeacc9eca23b35ecfd9d53274496978ec991a8bb4de2e41e2c8c5ce76c0439bce1f5ecacf11924cc7d2477e1e298a8a2b8a22cca03a43d98226dd57f805d433822e80e6405175bf49dd12d848ff1ef2a31edd2d4b1001da75f71517740286c6042aa7394ede75f8d3fd0f1885d403e4a7e6f27d09e866ee53edafae9861bc4f37096c40ca76af3888e90d63b98ccb64fd134a9c748e22848e307aa2796b51519e5c7482a162bc4158e6005c7665d9af0ac1d34a28e26cc68a7b9f08d5327e1991c36f0f43e29cf8ddfec6cc8e6d25ee17d3202a113ae8f497c22085"}, 0xf3) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, ']:S', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xd) 18:13:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, 0xffffffffffffffff) 18:13:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(0xffffffffffffffff, r0) 18:13:09 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x6, 0x7, 0x1}}}, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/203, 0xcb, 0x1000) 18:13:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 15) 18:13:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 14) 18:13:09 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043d098caaaaaaaaba457c958d38004d75d4e47b32a61dd873374aa9c2590473a257db442b2c512ab7b521eb4bd3c06e8d468dc9e91ef28b9061eff40e2621e5893bd56cde8f1e1fb70d993641b232d10365baceb4536c493288ce1c2c41032f38c8d68aa0b84b1b4838e884572af444fef6b5ab5f5143c579237cd687b9e84854a2ea2c7ff99ffd315560"], 0xc) 18:13:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) 18:13:09 executing program 1: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "c7fe60c23df44e6959708b8c494ce18785b68eadeacc9eca23b35ecfd9d53274496978ec991a8bb4de2e41e2c8c5ce76c0439bce1f5ecacf11924cc7d2477e1e298a8a2b8a22cca03a43d98226dd57f805d433822e80e6405175bf49dd12d848ff1ef2a31edd2d4b1001da75f71517740286c6042aa7394ede75f8d3fd0f1885d403e4a7e6f27d09e866ee53edafae9861bc4f37096c40ca76af3888e90d63b98ccb64fd134a9c748e22848e307aa2796b51519e5c7482a162bc4158e6005c7665d9af0ac1d34a28e26cc68a7b9f08d5327e1991c36f0f43e29cf8ddfec6cc8e6d25ee17d3202a113ae8f497c22085"}, 0xf3) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, ']:S', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xd) 18:13:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(0xffffffffffffffff, r0) [ 463.541654] FAULT_INJECTION: forcing a failure. [ 463.541654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.543931] CPU: 1 UID: 0 PID: 5485 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 463.543971] Tainted: [W]=WARN [ 463.543979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.543992] Call Trace: [ 463.544000] [ 463.544010] dump_stack_lvl+0xfa/0x120 [ 463.544055] should_fail_ex+0x4d7/0x5e0 [ 463.544090] _copy_to_user+0x32/0xd0 [ 463.544124] simple_read_from_buffer+0xe0/0x180 [ 463.544173] proc_fail_nth_read+0x18a/0x240 [ 463.544202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.544230] ? security_file_permission+0x22/0x90 [ 463.544270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.544297] vfs_read+0x1eb/0xc70 [ 463.544331] ? __pfx_vfs_read+0x10/0x10 [ 463.544358] ? lock_release+0xc8/0x290 [ 463.544393] ? __fget_files+0x20d/0x3b0 [ 463.544431] ksys_read+0x121/0x240 [ 463.544455] ? __pfx_ksys_read+0x10/0x10 [ 463.544493] do_syscall_64+0xbf/0x360 [ 463.544518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.544543] RIP: 0033:0x7f3fd3cff69c [ 463.544562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 463.544585] RSP: 002b:00007f3fd12c2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.544608] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f3fd3cff69c [ 463.544624] RDX: 000000000000000f RSI: 00007f3fd12c21e0 RDI: 0000000000000004 [ 463.544639] RBP: 00007f3fd12c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.544654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.544668] R13: 00007fff234476df R14: 00007f3fd12c2300 R15: 0000000000022000 [ 463.544705] 18:13:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, 0xffffffffffffffff) [ 463.734811] Bluetooth: hci1: unexpected event 0x3d length: 9 < 14 [ 463.736506] Bluetooth: hci1: unexpected event 0x3d length: 9 < 14 18:13:20 executing program 3: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11e}, "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"}, 0x122) 18:13:20 executing program 0: getpid() syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xc) 18:13:20 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04023904aaaaaaaaaa1105ff802abddb0100aaaae77fa4143e6faaaaaa1107b301f935daff07aaaaaaaaaa111281059cbdc6f7e000000000000005090063ca6803001e0f7cb94434a148e819a49fa2a1dc8a44ea757cdfcf1caa863a269852c537f0335e1676d3031d02bea265e81331ea30ca3376315831aa386796ad5cb0665b745098a506e374025e010dc5779850854500e10b"], 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, 0xffffffffffffffff) 18:13:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, 0xffffffffffffffff) 18:13:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 15) [ 474.921262] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 474.922501] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 474.953438] FAULT_INJECTION: forcing a failure. [ 474.953438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.956423] CPU: 0 UID: 0 PID: 5508 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 474.956458] Tainted: [W]=WARN [ 474.956465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 474.956479] Call Trace: [ 474.956486] [ 474.956495] dump_stack_lvl+0xfa/0x120 [ 474.956536] should_fail_ex+0x4d7/0x5e0 [ 474.956567] _copy_to_user+0x32/0xd0 [ 474.956598] simple_read_from_buffer+0xe0/0x180 [ 474.956635] proc_fail_nth_read+0x18a/0x240 [ 474.956661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.956686] ? security_file_permission+0x22/0x90 [ 474.956722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.956746] vfs_read+0x1eb/0xc70 [ 474.956789] ? __pfx_vfs_read+0x10/0x10 [ 474.956813] ? lock_release+0xc8/0x290 [ 474.956845] ? __fget_files+0x20d/0x3b0 [ 474.956879] ksys_read+0x121/0x240 [ 474.956900] ? __pfx_ksys_read+0x10/0x10 [ 474.956934] do_syscall_64+0xbf/0x360 [ 474.956957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.956979] RIP: 0033:0x7fd6ee01569c [ 474.956996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 474.957016] RSP: 002b:00007fd6eb5d8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.957037] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007fd6ee01569c [ 474.957051] RDX: 000000000000000f RSI: 00007fd6eb5d81e0 RDI: 0000000000000004 [ 474.957064] RBP: 00007fd6eb5d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 474.957077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.957090] R13: 00007ffcd5e4c20f R14: 00007fd6eb5d8300 R15: 0000000000022000 [ 474.957122] 18:13:20 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04023904aaaaaaaaaa1105ff802abddb0100aaaae77fa4143e6faaaaaa1107b301f935daff07aaaaaaaaaa111281059cbdc6f7e000000000000005090063ca6803001e0f7cb94434a148e819a49fa2a1dc8a44ea757cdfcf1caa863a269852c537f0335e1676d3031d02bea265e81331ea30ca3376315831aa386796ad5cb0665b745098a506e374025e010dc5779850854500e10b"], 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:13:20 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="5e20b8691bc07fb25d7086e04e7457be9dc5665c6ab9cbc8dff4f92400100000e73727a22c62e59986e3cd9784819f497b146cfa9011223954744cb209f918dd0f9d4479ba2ff937ca59585c065fbdcc9f03db6e9c6f4af4b0b6103efbb0e84014ea1fe9cc41cd68e0678510256ba021d6b832ff74874168471add14b83b21b05a5cd9bdd326f1ed98"], 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7}, "58cf77329e425b"}, 0xb) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x20, 0xc9, 0xc2}}}, 0xffffffffffffff8a) 18:13:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:20 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="5d2c03a380f6cbfd6c343bf6c86366c41206203d04d33ac8da6cdb549015d7cbe944741836db060cc603be436fe4ebf1c09855807ca40915f348c1016498252f720c12b9b45435f4dadcb47bc66e488175d14cc5df7cd85e595005ede848c93c15c4be5399b91e8d23d54c6a4955cf2794251cfccceb314e4bedbdaca9862372e2066f71c09eb79c4499fe9c177f3b727be9fee9086dce3a2e52758aa0cc5f87bc683c6c9535cb"], 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1b}, "3f113fa1f51cf0fd92d617b26814dad4c9f149ad1168392ec19bc8"}, 0x1f) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9060000a378fc680043315476efadee020d9f2200040004000104ffff2743ad88f1018b7263e8ff0d340906f29287c94f7d3b6342cbd4a912c81546cfc4794ac1fb63fb3ee28fa207d10634310ee978fbca40cc2bf208d54786a6c1500d7d1b898d8f3b9894591729b2ab524c81cdce26095637997a2d622d8ad56b479209410af2a711b3ae5e0d8266a4346ce6b7dd28bbf4d5093eb9396daf841db24529b0dd25e50bf80eb2769f174f1b38ce2c1bde08a543a69feab470a3a34616f6e504a2823685ea8c516a570e897c9ce162125e40c98e6bdfb18bf95ee99a28f7f3a456cfc2efe0462d3b3294ea83180800dfec1a065586a4c91d33d57c9957e32a3828c735a78936f786c101846ccc3db564b206547242e5d20c407d5700da9892d17aa5cb9b7b88b6236285ce4873dc6e61e0ad5fff889afa4dae5030c4e565aa1579d6231b163b2f4a9588fa5b7ecb2d8e180177715ec7c267210941850e1ed086f29f4654ee8d12a72bb3c235238de602e5aa2f41772df317116351b34f7fce598178bf6c498e9d82342a209a78a678567370bf485f2a3d505c5acaab813f83c6520ecd452a39fc4a241d"], 0x15) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x2, 0x1f}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0xffff, 0x4, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x3, 0x7c}}, @l2cap_conf_rsp={{0x5, 0xf5, 0x1c}, {0x2, 0x400, 0x1ff, [@l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x4, 0xfffffffe, 0x80000001, 0x8001}}, @l2cap_conf_mtu={0x1, 0x2, 0x3}]}}]}}, 0x42) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x2, 0x200}}]}}, 0x11) 18:13:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, 0xffffffffffffffff) 18:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) (fail_nth: 1) [ 475.206434] Bluetooth: hci1: ACL packet for unknown connection handle 1737 [ 475.211060] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 475.216373] Bluetooth: hci1: ACL packet for unknown connection handle 1737 [ 475.228472] Bluetooth: hci1: ACL packet for unknown connection handle 200 18:13:20 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04023904aaaaaaaaaa1105ff802abddb0100aaaae77fa4143e6faaaaaa1107b301f935daff07aaaaaaaaaa111281059cbdc6f7e000000000000005090063ca6803001e0f7cb94434a148e819a49fa2a1dc8a44ea757cdfcf1caa863a269852c537f0335e1676d3031d02bea265e81331ea30ca3376315831aa386796ad5cb0665b745098a506e374025e010dc5779850854500e10b"], 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:13:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) (fail_nth: 2) 18:13:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) (fail_nth: 3) 18:13:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x51cd32d7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x356}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:13:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:31 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) bind$inet6(r3, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4(r2, 0x0, &(0x7f00000000c0), 0x80800) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000440)=@gcm_256={{0x304}, "6d2005cd28308dae", "7abc8f3481e834a3b4c1fb8fcb3f3f71781a6203a97591712404f2c9e251e80a", "e077facf", "11c4063ee1d43482"}, 0x38) bind$inet6(r4, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r6, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r7) request_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='[-\'&A](-#.\xac\x00', r8) keyctl$search(0xa, r1, &(0x7f0000000400)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, r8) 18:13:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, 0xffffffffffffffff) 18:13:31 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc4, 0x0, &(0x7f00000012c0)=[@acquire_done={0x40106309, 0x1}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x9, 0x2, 0x2c}, @fda={0x66646185, 0xa, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x1b}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/61, 0x3d, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/164, 0xa4, 0x0, 0x12}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}, @dead_binder_done, @decrefs, @exit_looper, @increfs, @exit_looper], 0x6c, 0x0, &(0x7f00000013c0)="af719024ce19fd838fc6d660546ed05a183d81b806e4e4035bdc53016e5a215c828ca1f477f0b89a93fa871072eddc36bfe06d05f4572095e563a8fbbcf42cc6b15f743a028ad8d640b7d908d438422ef503389c3141468f8414379a915f802c5506850656173da8e1a08fe3"}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) syz_emit_vhci(&(0x7f0000001580)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) ioctl$FIBMAP(r1, 0x5323, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000000203010100000000000000506a74c50900020000000005000000000800044000000000080005400000001a3dbeb0000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40051}, 0x80) r2 = getpid() kcmp(0x0, r2, 0x1, 0xffffffffffffffff, r1) 18:13:31 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207b4b602000000001942c380194f33645a1a6f88627b7741e424186e517fa0f3217df4653000402e24155cc595c46840ad4ebda913ea5c997dfc3c7a9240183b95c5e3e3a49bd4b8c25ac006410057acb8a8ac4b3bf5d84f53e74e76ecf36c47295628b20af9cf06973805581f94a4610857ef09f8318c61a4bf086c6d5d814c5cd02f4388c4ea7047"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x29, 0x1f, &(0x7f0000000100), 0x4) pread64(r3, &(0x7f00000000c0)=""/142, 0x8e, 0xfffffffffffffff7) [ 485.910194] FAULT_INJECTION: forcing a failure. [ 485.910194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.911178] CPU: 1 UID: 0 PID: 5556 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 485.911197] Tainted: [W]=WARN [ 485.911201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 485.911211] Call Trace: [ 485.911216] [ 485.911221] dump_stack_lvl+0xfa/0x120 [ 485.911248] should_fail_ex+0x4d7/0x5e0 [ 485.911267] _copy_to_user+0x32/0xd0 [ 485.911285] simple_read_from_buffer+0xe0/0x180 [ 485.911307] proc_fail_nth_read+0x18a/0x240 [ 485.911322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.911336] ? security_file_permission+0x22/0x90 [ 485.911357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.911370] vfs_read+0x1eb/0xc70 [ 485.911387] ? __pfx_vfs_read+0x10/0x10 [ 485.911400] ? lock_release+0xc8/0x290 [ 485.911418] ? __fget_files+0x20d/0x3b0 [ 485.911437] ksys_read+0x121/0x240 [ 485.911449] ? __pfx_ksys_read+0x10/0x10 [ 485.911468] do_syscall_64+0xbf/0x360 [ 485.911481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.911494] RIP: 0033:0x7fbfa8bcc69c [ 485.911503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 485.911515] RSP: 002b:00007fbfa618f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.911527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbfa8bcc69c [ 485.911535] RDX: 000000000000000f RSI: 00007fbfa618f1e0 RDI: 0000000000000005 [ 485.911542] RBP: 00007fbfa618f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 485.911550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.911557] R13: 00007ffdf9af1cdf R14: 00007fbfa618f300 R15: 0000000000022000 [ 485.911575] [ 485.931242] Bluetooth: hci6: Malformed Event: 0x02 18:13:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) [ 485.967009] Bluetooth: hci6: Malformed Event: 0x02 18:13:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r2, 0x301, 0x20000000, 0xfffffffc, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x773, 0xe}}}}}, 0x28}}, 0x4800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r6, r0) 18:13:31 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_reconf_req={{0x19, 0x5, 0x12}, {0x2, 0x6, [0x4, 0xa00, 0x43f, 0x3, 0x7, 0x100, 0x5]}}}}, 0x1f) [ 486.060673] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 486.062810] Bluetooth: hci1: ACL packet for unknown connection handle 200 18:13:31 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x65, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x20}}}}, 0xf) [ 486.103905] Bluetooth: hci1: ACL packet for unknown connection handle 101 [ 486.105107] Bluetooth: hci1: ACL packet for unknown connection handle 101 18:13:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) (fail_nth: 1) 18:13:31 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}, "873b73c67f4d9e2ef0d34de622776464cbda3ebd6265a09393e04cc8731647a8da2a5335a890b38b428f4efe9e775df0862271fd964393c0e0e8f32ec933c8b54759705fdfafc678eabde5fe0ed5a4462d7049106183906921afab616df4aa45f9e83fe58afa872ccb583b458c53a7454351ea68ef05fdd401"}, 0xfffffffffffffc3b) 18:13:31 executing program 7: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x9, 0x38, 0xf456}) syz_emit_vhci(&(0x7f0000000c00)=ANY=[@ANYBLOB="04020797b60089eb53fe326f22404e5bd5e97d2d1b9b95456efdc6b1b0c6d652ad1a7ba02b14be9636446fa661027f40a9e064e19a262c8a42f4e86016fd0b6dd66fda3fd29cf84a151bc633748eaeec5ef3e2a12c87a648a3895c903d1fcd15a4cb171ba1a771618ea482c32ab65f50f723dc500f679a084152a530f50eb95536c64ef0df0bd85de04ecad70b4649c9ed6c2fa6795f6a4df5e6da5e8dc5d3719eee3309f17ad8eb2d97f6fac2337d22d8997c76e85bb663cb4c4f0a38585714fbfd0e494d8f647c9a4216025445748c0921810af0ea3ddd86d2554ea041b547a890c9a92240692868a869daa5237516080f02e917"], 0xa) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x8, 0x5, 0x3}) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) pread64(r1, &(0x7f0000000000)=""/14, 0xe, 0x520a) 18:13:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/191, 0xbf, 0x1, &(0x7f00000005c0)=""/121, 0x79}, &(0x7f0000000640)=0x40) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0xf00}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="43a01149ab7ed909b1193d2390cc7fdab860972040f7cd5a8190b0d373858b3e07f03c9dba59cb6fd6cc68a4d2d1ccc76613aa416551c45581cdd0c0b47cbc9ef3e1ad38110412077c782673a854f04805b7aa8925c0a25773ebdb3860a560170a55ab3dcc268d07b7e044195356705011497d7ace011e9d2a58727b38eb4258fb528d6a24100379163689f4fcd357cb48392b32d828d19f724db786929f7cd1670006170727d11bae09c64f080739360cfa25ff54a253fc573443d69407de0630fbac8ca95cc399bfcbba02655b9d980a95bbc29586fa9df1b21e6e731566804961dab0", 0xe4}, {&(0x7f0000000440)="1b7810f94685cd407da56c23d321ee5a4b784e860142990169f9c4b1f7ff07074d226eaa7739daad540a0972ca4ed88007f5e4de54ec87d9f9252a0fa62d6870b60bac5ea6b41555c46be2d42151892cde5fed897a9696c64504bd8b736f99035801f8f6123272356c549e05d99f481b01c96ab06f3f6561af7fc9fca6b2971988eaa51860db049b4494ad0cdcedde1ace", 0x91}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 486.219009] Bluetooth: hci6: Malformed Event: 0x02 [ 486.224561] Bluetooth: hci6: Malformed Event: 0x02 18:13:41 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa') syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:13:41 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/191, 0xbf, 0x1, &(0x7f00000005c0)=""/121, 0x79}, &(0x7f0000000640)=0x40) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0xf00}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="43a01149ab7ed909b1193d2390cc7fdab860972040f7cd5a8190b0d373858b3e07f03c9dba59cb6fd6cc68a4d2d1ccc76613aa416551c45581cdd0c0b47cbc9ef3e1ad38110412077c782673a854f04805b7aa8925c0a25773ebdb3860a560170a55ab3dcc268d07b7e044195356705011497d7ace011e9d2a58727b38eb4258fb528d6a24100379163689f4fcd357cb48392b32d828d19f724db786929f7cd1670006170727d11bae09c64f080739360cfa25ff54a253fc573443d69407de0630fbac8ca95cc399bfcbba02655b9d980a95bbc29586fa9df1b21e6e731566804961dab0", 0xe4}, {&(0x7f0000000440)="1b7810f94685cd407da56c23d321ee5a4b784e860142990169f9c4b1f7ff07074d226eaa7739daad540a0972ca4ed88007f5e4de54ec87d9f9252a0fa62d6870b60bac5ea6b41555c46be2d42151892cde5fed897a9696c64504bd8b736f99035801f8f6123272356c549e05d99f481b01c96ab06f3f6561af7fc9fca6b2971988eaa51860db049b4494ad0cdcedde1ace", 0x91}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:13:41 executing program 7: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x6a}, @l2cap_cid_signaling={{0x66}, [@l2cap_create_chan_rsp={{0xd, 0x97, 0x8}, {0x1000, 0x7, 0x80, 0x401}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x8ece, 0x800}}, @l2cap_move_chan_cfm={{0x10, 0x7, 0x4}, {0x4, 0x2}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x4ac5, 0x7fff}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xaa72, 0x5}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x1, 0x2}}, @l2cap_conf_req={{0x4, 0x8, 0x27}, {0x9, 0x6, [@l2cap_conf_efs={0x6, 0x10, {0x8, 0x2, 0x8001, 0x9, 0x26, 0x8000}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x4, 0x6}}]}}, 0x6f) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x1f, 0xa}, {0x652d, 0x1, 0x100, 0x42b, 0xfc01}}}}, 0x17) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'ip6tnl0\x00'}, 0x18) 18:13:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00add7a1ea3a975424eead753963ed0000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = dup2(r3, r0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000075c0)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000076c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000007700)={@multicast2, @multicast2, 0x0}, &(0x7f0000007740)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000008d80)={'syztnl2\x00', &(0x7f0000008cc0)={'gre0\x00', 0x0, 0x8, 0x80, 0x7f, 0x8000, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x67, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, {[@rr={0x7, 0x1b, 0x9, [@multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @local, @remote, @private=0xa010102, @broadcast]}, @lsrr={0x83, 0x2b, 0x98, [@dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @empty, @multicast2, @local, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010101, @multicast2]}, @rr={0x7, 0xb, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) accept$packet(r4, &(0x7f0000008dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008e00)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000009540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="62872bbd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c02028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="080001e49f16496f464e34ecdbab7fd82574", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="3801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400d6f8ff0100000000a3cf09a001040000090009b80000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="380102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="c800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x700}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3) 18:13:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) (fail_nth: 2) 18:13:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 495.983669] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 496.021265] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:13:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:41 executing program 0: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x99d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:13:41 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xae}, "c655e1bcaa7ce4632b461cb282cac627a0880b7361b1156a73985bf2ecbfc3a2ea19cc96178a5fa81dd92ec6b65c98ffdac2443cd89b71390b33705f0d7310362b19d1175f6119eb1f07d9cb8041ff9a9449a57860acbc178afdb7634254d04aaf79bc2326fa3dc08110fb2f534fc49e481398ae4b6d207498143e4ee11604b7cd9753fb93e9b4e2e7018a32fbb38faca11ec9d54c3b323bf958b077ce710d854a6db871afab10d54509e8a01891"}, 0xb2) 18:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/191, 0xbf, 0x1, &(0x7f00000005c0)=""/121, 0x79}, &(0x7f0000000640)=0x40) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0xf00}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="43a01149ab7ed909b1193d2390cc7fdab860972040f7cd5a8190b0d373858b3e07f03c9dba59cb6fd6cc68a4d2d1ccc76613aa416551c45581cdd0c0b47cbc9ef3e1ad38110412077c782673a854f04805b7aa8925c0a25773ebdb3860a560170a55ab3dcc268d07b7e044195356705011497d7ace011e9d2a58727b38eb4258fb528d6a24100379163689f4fcd357cb48392b32d828d19f724db786929f7cd1670006170727d11bae09c64f080739360cfa25ff54a253fc573443d69407de0630fbac8ca95cc399bfcbba02655b9d980a95bbc29586fa9df1b21e6e731566804961dab0", 0xe4}, {&(0x7f0000000440)="1b7810f94685cd407da56c23d321ee5a4b784e860142990169f9c4b1f7ff07074d226eaa7739daad540a0972ca4ed88007f5e4de54ec87d9f9252a0fa62d6870b60bac5ea6b41555c46be2d42151892cde5fed897a9696c64504bd8b736f99035801f8f6123272356c549e05d99f481b01c96ab06f3f6561af7fc9fca6b2971988eaa51860db049b4494ad0cdcedde1ace", 0x91}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:13:41 executing program 7: syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x54}, "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"}, 0x14c) syz_open_procfs(0xffffffffffffffff, 0x0) 18:13:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) (fail_nth: 3) 18:13:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/191, 0xbf, 0x1, &(0x7f00000005c0)=""/121, 0x79}, &(0x7f0000000640)=0x40) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0xf00}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="43a01149ab7ed909b1193d2390cc7fdab860972040f7cd5a8190b0d373858b3e07f03c9dba59cb6fd6cc68a4d2d1ccc76613aa416551c45581cdd0c0b47cbc9ef3e1ad38110412077c782673a854f04805b7aa8925c0a25773ebdb3860a560170a55ab3dcc268d07b7e044195356705011497d7ace011e9d2a58727b38eb4258fb528d6a24100379163689f4fcd357cb48392b32d828d19f724db786929f7cd1670006170727d11bae09c64f080739360cfa25ff54a253fc573443d69407de0630fbac8ca95cc399bfcbba02655b9d980a95bbc29586fa9df1b21e6e731566804961dab0", 0xe4}, {&(0x7f0000000440)="1b7810f94685cd407da56c23d321ee5a4b784e860142990169f9c4b1f7ff07074d226eaa7739daad540a0972ca4ed88007f5e4de54ec87d9f9252a0fa62d6870b60bac5ea6b41555c46be2d42151892cde5fed897a9696c64504bd8b736f99035801f8f6123272356c549e05d99f481b01c96ab06f3f6561af7fc9fca6b2971988eaa51860db049b4494ad0cdcedde1ace", 0x91}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:13:53 executing program 7: getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x8, 0xaf, 0xfffffc00, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x10, 0x1000, 0x4}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd5200fedbdf252600000008000300", @ANYRES32=r2, @ANYBLOB="1e001f0000080e440b00000000000000000400040000000800f7fffffb2000000400af00"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x10000) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:13:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:13:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) dup2(r3, r0) 18:13:53 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:13:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x26}}}, 0xa) 18:13:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 496.244014] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 507.760447] Bluetooth: hci6: Malformed Event: 0x02 18:13:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 507.796573] Bluetooth: hci6: Malformed Event: 0x02 [ 507.801384] FAULT_INJECTION: forcing a failure. [ 507.801384] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:13:53 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xe00e, 0xff, 0x1, 0x1}, {0x6, 0x1, 0x81, 0x2dc8e39f}, {0x5, 0x5, 0x8, 0x6}]}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) [ 507.803234] CPU: 0 UID: 0 PID: 5658 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 507.803270] Tainted: [W]=WARN [ 507.803277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 507.803290] Call Trace: [ 507.803297] [ 507.803306] dump_stack_lvl+0xfa/0x120 [ 507.803347] should_fail_ex+0x4d7/0x5e0 [ 507.803379] _copy_to_user+0x32/0xd0 [ 507.803411] simple_read_from_buffer+0xe0/0x180 [ 507.803449] proc_fail_nth_read+0x18a/0x240 [ 507.803476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.803501] ? security_file_permission+0x22/0x90 [ 507.803543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.803568] vfs_read+0x1eb/0xc70 [ 507.803597] ? __pfx_vfs_read+0x10/0x10 [ 507.803622] ? lock_release+0xc8/0x290 [ 507.803654] ? __fget_files+0x20d/0x3b0 [ 507.803688] ksys_read+0x121/0x240 [ 507.803710] ? __pfx_ksys_read+0x10/0x10 [ 507.803744] do_syscall_64+0xbf/0x360 [ 507.803768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.803790] RIP: 0033:0x7f9f4a29069c [ 507.803808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 507.803828] RSP: 002b:00007f9f47853170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.803850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9f4a29069c [ 507.803864] RDX: 000000000000000f RSI: 00007f9f478531e0 RDI: 0000000000000005 [ 507.803878] RBP: 00007f9f478531d0 R08: 0000000000000000 R09: 0000000000000000 [ 507.803891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.803904] R13: 00007ffd7e5791cf R14: 00007f9f47853300 R15: 0000000000022000 [ 507.803937] 18:13:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4600, 0x111) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:13:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/191, 0xbf, 0x1, &(0x7f00000005c0)=""/121, 0x79}, &(0x7f0000000640)=0x40) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0xf00}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:13:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="273209aaaaaaaaaa00000900"], 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:13:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:13:53 executing program 7: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xac, 0x3, 0x2, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x4}}]}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) 18:13:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/191, 0xbf, 0x1, &(0x7f00000005c0)=""/121, 0x79}, &(0x7f0000000640)=0x40) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:13:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 508.074560] Bluetooth: hci6: ACL packet for unknown connection handle 172 [ 508.090937] Bluetooth: hci6: ACL packet for unknown connection handle 172 18:14:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:05 executing program 7: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_open_procfs(0xffffffffffffffff, 0x0) 18:14:05 executing program 3: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x88, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="72ca0000cbded22447c94252ec7e87e776f23ecc707f75f92716be27a91eaff9eb86532b2a27eac635d054ea3be14b72b0f460b4ab71c596d1ee549bd02cfa416bdbcd6f1ac3af59ebddc96bdd4e2e12f8a8a9", @ANYRES16=0x0, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x20040084) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04024b45242a78fe21dbaa6cdba774147ba692fc1609a43a847b65c936048d40fecad2906874cb2ef5edb53e3bf36a075e2804a318d80f6d4a5b0362c32c1fc36598cb0323accba614a5fd3e50348b2243fbab7dfd40aefd047a39e3f73b52b5a14620439ac8ce4ccf0ffe9ee3a558502c7d9a3e50c8740cfad3b46a02de7186eeb495e98fafa5aee6575b4803dcc543624cdc2a8d"], 0xa) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x41}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 18:14:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000500ba0c280003000000", @ANYRES32=r2, @ANYBLOB="e384d5cab489ee75420efa242376ff1a876d9f2d9e4c000000000000"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:14:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x44600, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r1, 0x5323, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DEST(r2, 0xfffffffffffffffd, 0x44001816) 18:14:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:14:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r5, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c010}, 0x10) r6 = dup2(r3, r0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d610500000000000000746963617374000500830001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x20040014) [ 519.819091] Bluetooth: hci3: Malformed Event: 0x02 [ 519.845566] Bluetooth: hci3: Malformed Event: 0x02 18:14:05 executing program 7: recvfrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40010101, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x80) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) [ 520.003617] Bluetooth: hci6: Malformed Event: 0x02 [ 520.010462] Bluetooth: hci6: Malformed Event: 0x02 18:14:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:14:14 executing program 3: prctl$PR_GET_IO_FLUSHER(0x3a) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:14:14 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x43, 0x3}}}, 0x7) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x63) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 18:14:14 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x60a480, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) tee(r0, r1, 0x7, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006040)=[{{&(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="9255be782b77872f4fe76686c080f348d4cd18d31091cd1e8662c33586f9b648df7bb58c93b1c42b53a9c696bbb5eeb84d06221c7b512a110183f52872e318e1e0265b6deb277f2a5b1c6640461d990522ddd992654767ffd63aee9ac78fc3d96a25270d19c328179ed91098904bb7c2ead906d61396e345a79022162d1356d105cd2e065ac37778842fe181c68a509f62edc1358c9e41ea9d0e5d5e7c542611f2ec8db59df78dd1c1a2ad6985d9d1c95f248a26b9c40e96a7dc36cae2a9712f6b6d50c98889ad1ef1ed03a1ccff9f48f108d59e0afa793ee70dffd818", 0xdd}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2a}}], 0x30}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="96dc3bda4bcf563747da74a4b09980ef228db4f389f1dbd3888a03f7a81e3ff4e7df2b2e1ce34c2246f2413e039b016dc640d67f9431e6a926c479a47ef3dc5628079b1370f8fae099ebffd0ad054b294ed2bacfa97d488ec113686f6d06db7824b83a7bf8edf847da7f95e1", 0x6c}], 0x1, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x2e, [@private=0xa010100, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010102]}, @generic={0x94, 0x12, "d85a1fa9aee5a058f2b3d188d723003b"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x2, 0x4, "9c9d"}, {0x5, 0xa, "429a61d225aeb8b3"}, {0x2, 0xc, "bc66e5ee9f7fd2cb29f2"}]}, @timestamp={0x44, 0x14, 0x1e, 0x0, 0x5, [0x3, 0x3b30, 0xd71c, 0xdaa9]}, @timestamp_prespec={0x44, 0x24, 0x22, 0x3, 0x6, [{@multicast2, 0x3}, {@remote, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@remote, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f00000008c0)="d9eb09f2d7c1ddbc227f4090c7755c57c3d1123005e315db41ea0e2e69e9ecaf4d15c57c47932242bb43a267ef168eae0afe5f84a3c8fd29a807a735db414231cc072dc64e2ae1783361687761a5921763a2a9c104fb9e0d07b78306b3be8f3b590f3cd275545723ef8733ff80ea6e86f80e95ff4fa72f1cff1d0b5c2645ad46d4ebc475bb", 0x85}, {&(0x7f0000000980)="44106a06ae8f3dc0455bdebbb5033d0e3bab88897d120e3f37f38b7e530ec2246a617b3d585d72153cf741a91aac0e424a87ba8b850fb3c12b6eb730a079d5bd0a1d98a3cae91a9ceed4478a198492a7d38419f1546a65cc70f9a75b251e427383db1a69fa8b996c57e3f6e7a8f9284ceb1729fd06792ba65a9f0454c98afb92e38c9313ab035a7c7ac1ca3521f3a429df697282cfcb105ec48912e8af9915fc8567ae88", 0xa4}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="9230cfb839736058e40e2ec263496e28ac68d073a6b1ec10b038aaaff994ac7d3719591ec0d6c03913ac7488c0", 0x2d}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="e4c527157b490e645e9cc0a07b2f7cc6243fce3626fed4e134aff4bd47766f1aca7f997f8e737eb3761fb5489343d96df4dd39ce2fa373b5ad7dfe8aa732079ecbbf627f74e27904d39fd91a62329a4bcab6f44c92768d080d8a5508b832386d4d4207af914fdf656ec2a2b601b6dec418feb4e23ea2003cc844338898e6663a930c997732a62525811250888f8e572942c44600", 0x94}, {&(0x7f0000002b40)="15b5d9ccac99a5451b89fd2ab76cdf57139b8c1e0b1212e7f95842901c7293afe3ab68db0f24ceda66348b79763ed9964adcda9603545b5a61d7f3c553aa24cb42cb561694012468d671f1512c26e0c3a9b802e9a544b6b05456193b728550bed1232a12e7a5d5f00a74e501d0e0c662421950a67009feab1a98ffc0beb69621ce0aa4a81d527dae3b5dd830d8864a7f7f26ac096a321e81e3", 0x99}, {&(0x7f0000002c00)="1c9222f4d845ba74475510f783998416a1695a98c345b480947112d5b942cb72c1208be3ce2e24a757b02041b1b548a35e40bf8648ced6143d4c2deca9c49f4f2bd1c7a2e3863c0d06063c8491fda8e3c9de75ffd65ff05c0a", 0x59}, {&(0x7f0000002c80)="00cfd767a9407f441da0109948abfc47a8a016c1f8a0c14b16efa671d4b36ffc4610a097ac5cfbcbd9b190fb2ead2db77df220c0e20f93584c65ffe01d6ab2b0303727cf557f378208c243afaa8486e3e772d16f3684d8ea82f5d9cbe005cefda3e3f99c92245ab9f734923baf36", 0x6e}], 0x9, &(0x7f0000002dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x50}}, {{&(0x7f0000002e40)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000041c0)=[{&(0x7f0000002e80)="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", 0x1000}, {&(0x7f0000003e80)="53552e246ecdba59d0eeff6f0550bc869f03042b18a21bd32ebfe37e80aec751c18cfd3ea73cf5128361f2fd4162bec0bfa2d287a7a966fd90f0f5b8d8ef7c061f312b518bc410159ac6980e999cc3dc7b1e9d73abce3bd9f9434d9d4c5977bba5ddb68b0d40e6847b8d18a8f7bbc970c8ee0e6ff560096427", 0x79}, {0xfffffffffffffffd}, {&(0x7f0000003f00)="30d677e9821f1d76f4dd820c438e3d0400d4ba62607ae067f65b5c02bb22622c629c1e2931dcf2909e3fb7be42e34741575e29a577df06eff6f2a40684a6204cd6f36247f48ba1c306ba06b3b5e6aa11a8491028dc9f515948aec249d23f097fed4d677996f889215a56d967218c82b089d4ca18b985edc8cb46e6c1eeed85652ec26f000c4cda2c0f581f321c97925b411d1246d3baa0787866602013e76591456b7e631f1582ad976ab6920272fcb0b2ed4b2ab76d9ba8df7a6c82018005391018cbfeb4cc94a16d2c4be780fde04f44e1da9160eaa43e424956b7e687fe80d404d1ec214f868e7a4980fac2cebe8ec22c9b6670", 0xf5}, {&(0x7f0000004000)="0695448012984114a262cbab8637e5f012f88296327705ed58d67fff53b10c1ca5430c71fff2efc9e5949f0d31dc2419d43dd8a9cbaf01c3662aff3f26662024744ebe57cbd8391ce7a1af1815099977cf", 0x51}, {&(0x7f0000004080)="8dbfd349b35c9a26c0b53ceb8157921ea87e0dce00667dc60bd47895ff283ea8560a6e51da7e20bf62de5fc6b26da8695d7005cf9f874ec8cc759f17cf0d4c1ffd7d6c", 0x43}, {&(0x7f0000004100)="a72ab2a7ef3afb3eba5365b4ed068219c74a9248f5aed7365bdb57ea936ed25c2903fa4348b3bc5fe78551a8a306381bf1928eca66bb9c02679f64c95772753c46adb2ef8f4d4a10", 0x48}, {&(0x7f0000004180)="a6ce46c9983708b6ceb85f9712375526ecd8ba067307d6183af1a261a80964", 0x1f}], 0x8, &(0x7f0000004240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x38, [@multicast1, @broadcast, @remote, @loopback, @broadcast, @remote, @private=0xa010101, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xab, 0x3, 0x4, [{@broadcast, 0xa8cd}, {@remote, 0xfffffffd}, {@loopback, 0x2}]}, @lsrr={0x83, 0xb, 0x9f, [@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x17}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @broadcast}}}], 0xc8}}, {{&(0x7f0000004340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000004700)=[{&(0x7f0000004380)="95bbbdf1a63f258228db6104b6f4e77e23322feea1046882a7f9d6a0ec0df43537450ac379028bbd4156b96792758b916c4705a06441a5393895e3ee7cbd23cbab8f512f777f41809c4f50bc2542d48bf0618099c496223564998dda", 0x5c}, {&(0x7f0000004400)="14f2c8092b168422d7e085c86c1bf20e442ecc49d245789cbb6d58446f4036efb560f2", 0x23}, {&(0x7f0000004440)="b9ae6a46500354215f55cb5103aab612b53d63f84573f608e1263e4618bf3168d81651aa0c8e6cfffcdd5811a0744961bfab85994073463402c55f032f2814d1c11a295b6b16d009253a3eb5d1f02e4d10a4a8e72d0a7a1cd900c2", 0x5b}, {&(0x7f00000044c0)="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", 0xfb}, {&(0x7f00000045c0)="8939f8fa6a267dafe8e3b6a409d49025696b1a301eee3e568c3e979fbe77a9ce10041cd610392aafbb9a18f06a8295ba4052022603a3c49fc9c791d93651bd0fae1981b315f41e024783104fcd33b5fb75738cd3af55d6b721a43812717e0d4188a8d79bcc64b5155779677d51d0f439375e61e803a5910ce32c9ae77fa86f2e0d16f32e063c680a4b80707b8fd4d1da4a8b017fac4aa577514ae5480146d06a867a250637d1eaa843c2543ac5dbbe8b4d3ee4b8f69780d2248ddc6d2824c94090683c814f4d73fa5e62f6877d4fe8838f750c0015a12d53596c210349cb7ca6d61cdbb62b3e16c397cc74f16c", 0xed}, {&(0x7f00000046c0)="dc02b1c4c962a7e3282ec9b60fdc476f28210675c8be995df1146572136ca2ec983f4b", 0x23}], 0x6, &(0x7f0000004780)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb31}}], 0x18}}, {{&(0x7f00000047c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000004880)=[{&(0x7f0000004800)="8949435965db8196d36b2301cf1bb6ca85c4e35523c341", 0x17}, {&(0x7f0000004840)="b59ad0b71374068f00dc679158bddc4c0cc1a0e9508fff13f676a16ddefaff22f597ab62917b825883974a13d3765b92", 0x30}], 0x2}}, {{&(0x7f00000048c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004900)="787682e93bae361e6ffb41d1ec4977dd0e9d12102872c797a9e111fe8abc74a1452753d4d0d02b832c603e261a76788941f92f5830e30b3a3d845be4506281bccdd18b4c28479b73ee8d7f49f6c17d37efb4e40a4b35266b86e30ab8d4ff921cd74b9479339c6e473453d9c8ee5f7dc871855d06be43b0e9cea353530f0c06a34543d83322d3c01a80342a2fd34c73cc402e37bd2a", 0x95}, {&(0x7f00000049c0)="7d340132b875f19ab1d8c105a322a9140c6e16a43b29853ff9a5e5569a95d3aab8b58f860c150c7a92f3a322f60134da056fa06f77164e1bbf73c8577108fc628fc8f8d6d1b8d66dc430c266a9bee0b5687e11a6c05c1c518b608d3669d93b4a925c9f6d5b4cfd25162deff6dbe73ed457717c882d3ba2905f3f07", 0x7b}, {&(0x7f0000004a40)="6c46cd897df5e6e168792492ae61de5b27c20d1d6de5ade0922bc2e95f66454edd6d0cd438d9f27e2b8de1bb60adaa00d744729be543e7f5f48d9ff96b73cbd1b7ca800481ae50322a888370245f991f0600b511e589641ea5096e2231dd7a796dd9ceaf79e000c049260b34d998cc99023c360c870c4aa78cd9c8d320465b469c00abe871ac7f20bf6e2aa324", 0x8d}, {&(0x7f0000004b00)="54b90bf34102475aa344f31dfac54e6f9f50ea2949cccf793f49d7c61ad6c33cc5f686bb67534f6fbcefa3c0bd5932d248a4022776153736b0ac0dd4d93a6bddaae9facf14a50e9fd79990a31d5a31f1d98999025205ed2ff56836849e20b38163858decc17aeff120684818fc0aaca66d03b8ad953fc95a3a", 0x79}, {&(0x7f0000004b80)="10be6e9494fb46aaf00f4da4bdb485e63297b16e5a3ab983bedbc3a7e0b4215994c1f8c1d136f0a31f4bac69dabe64e72cc656c417f6bed4c67e21d98b6c0321e3a72102f026c6c2d66ef7c80f392695814cd260b7afe2c70f7045d8bfea31c1f601ada5fd99390cd5945678498a203b8d097bd8d33fc191f0d76ecb6359aa541f498df7ba8a8e2a32676efd58af230fad70f461e4da9d15ab1501d9777a9088962d61bcb7d3a4c4f1382b4d42b0ce34cdd81a74259499d90e7760561302337cf4e02df2edc8d92d574a62ab02f0da449103a6a059281efc01cc1bff3a887251a8c17ddb05e5f7afa78d2e726fee0d1bdb38b6872c1c3a1c72", 0xf9}], 0x5}}, {{&(0x7f0000004d00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000005f40)=[{&(0x7f0000004d40)="1c0c561775fa450f5181c66bf624c33f80c2c7231182e5484ddc559124c2b9cb2a7f38e0f86c14ae90fe9b330b639390117a98aa8ff0eb53dd08ae95996e683b5df4b9c36aeaac0a7c02358e48bdb044b7bc4f604134cbd4", 0x58}, {&(0x7f0000004dc0)="f922c4cd50acbd51d70482d490283b508b13096d72e6c81282062b4580e8370a521d46dba7d5d7cd6358025316c7ea1a45c23b8f10d983999885db1f476f478ffa629aeb829f1034a7e2e59cc26611a7ce9685831da5f2f874734ee5a7cc99711cb15ba021e6581eed2fdbd653c34f26caf398b14ad9d76a22192d93ff04cd7cfa59651b5ffe4826be442da56d16f6301c2cf00e407b76076dbb46b427f29e757c7db3d7a270c23d", 0xa8}, {&(0x7f0000004e80)="7219456cc55485839ae96e534206c3", 0xf}, {&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f0000005ec0)="bdc2110f0085134f1fb5ce79ac51d3e21dde2d1feb93cfac1ac252b19cd0297f521cc1eeb295cae298186cbc757ea47c56807117e98c36cfd37bc8f87b8da2a0acb2a70286cd94", 0x47}], 0x5, &(0x7f0000005fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}], 0x58}}], 0x8, 0x46000) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r3, 0xbd5445900b633103, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008081) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x8}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "637c408bb5a5ea1f46b1a4695f8c6b085f47443af8c3c938"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb1fa20f7bd31a7f90dbf0731611692c17910ad0661f0385"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}}, 0x4008000) r12 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r12, r2) [ 528.757032] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1 18:14:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:14:14 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0xde3}}}}, 0xf) 18:14:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:14 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="022587000000000000001c08028007777350ed02ec4a7711d159957f6947e99d9ab7d1146ef4bf141eb8144a7c6beaa76a1419eeef7b844ac7545fc5d404b00d36654a73524716a0fdfc"], 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7c}, "ea18f98ddc045274cf91c3c2945c706918f0045ecc2c8a02d58dd2a97bb13925daacc9033b8e1f92e34862fe141eac726ca8f019b4ee3419655f39f2ff701dd4df10422c07bdee4d66e055cdd150fe670837da9c4c469e5e167b3147e9b6fd5363c91b29ddeac62558428511f0d5f26cb1e96f56187695862f4ee3e6"}, 0x80) 18:14:14 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:14:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 528.757225] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1 [ 529.048880] Bluetooth: hci3: ACL packet for unknown connection handle 1829 18:14:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 529.054147] Bluetooth: hci3: ACL packet for unknown connection handle 1829 18:14:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x99, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:14:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 18:14:14 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207b4b600000000004102d0675ba7cc5ec068cc55451df72c003f506172b99f80a4b3cde134d06ee66b16e0dc8729cb17f019b91e1a831e357741a90a8b3021b07441f62d2cdb864b57149b1be65bfe7c630b7a8cca35a6db6a2ad52fa7aff5ea8247acfca0096c3c1a651a3b91fd5d4768f21ab3ebe7966295acf3f05851fe0e4190f0bd5951cbde9ce21e3fb747c6d2bc7f85879801d31f7256"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:14:14 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="75816616018c30f2c7d170961e1b0ad22d1c4614603ebd940852ae8be3613f617019e846612b229775a6fec16d0f293cee98ea95389dab1153c3c994fc9e4e945b3ddeaf1ba855efd26822a8202f3c0d618bbc2ee7e0dd5d50f2d98d078065e035c690bd5be4a4e489e6029993a6bb7b0550863a1ebc06391df59721ceaa0c11d141780f647dd0e05adebdaa7207bdb2246dc997a734e80d77aac1871366b4e7678647bf60ed870c44a77dcb", 0xac}, {&(0x7f00000002c0)="4ff0cf16468f03a795d06de56b811ef7003ea5416548de8f336c1a34a2e9e900e72da055adb7d45d6b40", 0x2a}, {&(0x7f0000000300)="20ba8b257a026fa4f3e486b6d570792911599a62cf437ba72b3c314d59a692b27eff1433b3e99a181ce17295020e06fa721671a66dba2c6b60bf965b9ff83d8c33662b516d6caf91183a5983fb91f2538bac25ea9f41e0c6cc2e1439c9f8e037567de9c9641363902afcff9a7552c15549d4373e5d89e2", 0x77}, {&(0x7f0000000380)="d3faca98388caba138aa3b5ece0c06f77844f09c0dfd91a2d1f62905e40e052e32a9299192292979e1297b7a2856176d50277af6bdaa22a496b859dbaedc7fc23af71b943f8cb6a033fe6d94a7c903e8235ceabe83f2441ced09a53ce5ebb816e52aa04c287fd23adff56db09d1fa37ef310adbf31af17b8ccf3b1a5ce0745844f0ac279cdc71aab4d8464dcbbec095fc27db623113635bed5f4db278128a2e772296f8eec64c8", 0xa7}, {&(0x7f0000000980)="39219a4b282d7929ebfd6405cc5955eaf1821385e7449551ec0c6cd199191ab7b0ea5cdd16611a6496f4c110cab808738a42446091a066a23f7e77d9bc654d73420319c4b7795a1581ea496476d6c29d6afd71918bdec6724f90f1b83af780adc0c39fe351a5999bcc3b2e57a7b67365c782722e4bc48b81969f28f05ed0044210124c453927c6a8502852003853b6d0c1650f61f4c37fa4ea438aba497039f2f5378ac985d4b20c603d3c5fbbf2ad948929c28ea9e145744ec34b8a72a9fc22cf36", 0xc2}, {&(0x7f0000000540)="5cfa6e10a3e6bb268db6e445f3ebbcdca9b7100545e0005923ca9d352ab433841664aae87f233fcfd85e71f12e736320f26d392877aa249ceaa63c7b23e6e11629f4b7d1ed596169f21c27924f672a4ed0c34996d068e623c459939033e75c637677016c20ae56ba99014857059713b173cd5a674e6be1cb55dd8275f9e7374417563c13b8a7893357c81db7beaa4400e8c6b3bc149cc8638b09758604168d73fd73c981568a64cfac9dee67ec2fffa3e800389309c761bdd307e1d277138b69a547871389f2b49d83baa383f0d91874", 0xd0}, {&(0x7f0000000640)="a0315fa97d211c1ae324f63a5ef35df4f6ab99d38e80af967bd7fcff7159cf7ca499c9e801f39de9f25836c985222636115cc0dd2d44a02628b344ff6e02062300a3cc0f3508b7325f6d4a02292cd13107c2ef02a4efdb2378e30634f6bf0e803f280bd9e002d6cb0698f7774c444e57f8ab6aef418af34c79600e9ff8fb539403f96d2c9b49e789d8306f0ba841e070", 0x90}, {&(0x7f0000000700)="7f9ef0b70b395e3b2ce0b380397a39e8c902071d652513f2a07374f1837e7984a19fa149b9aaf722891fb641c6ca001d6f566a1a013e510ad3727912b1b020196821b875fbf89a8afdd1084f60d6ee27237de9634ed8c3ca4561be4d962d541a911ac546912316d7a52bd04787068a62af19ebf7fda69db49091cf63e27aea", 0x7f}], 0x8, &(0x7f0000000800)}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c900da1ac567899fa400c9c3aa3dd1c6dd86cce90732823a38940fda9f2724caa595c361ee63fefe8cb4d798f0c82da4e5c48c2ba5dac5cf690381086d2efc4350d80f9766934b1b24049b519149d01e7e47d34d054408ac268fe63b6d0075d8cfdc4f932141d9c81201d5ecab470a6c64705ebc273a3961cf0b2e2b40bb7039ff6c40ef73d831bd098754bed55ea3f935f7c29407810106c6dbca1dbfce095deef06817eec4c9ab36adfcb16729c5e03b717b8f0cb29378c164847cae1b975ca8ee204ae30e7ebe9e1a69b6ac7eb8fdf48ea3b9b87beb9ebbdd28"], 0xde) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xf7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x80, 0xc8, 0x200, 0x6, 0x1, 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="042c1180db2163213963d676c6740fc9000000000000002e06483203ec0007"], 0x14) 18:14:14 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x4, 0xffff, 0x3, 0x1, 0x5, "70a1c0f8644aa6b9"}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:14:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xab, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 529.230641] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 529.231850] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 529.234419] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 529.316884] Bluetooth: hci6: Malformed Event: 0x02 [ 529.328517] Bluetooth: hci6: Malformed Event: 0x02 18:14:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207d270a292470ddd6e213c5000000000000000400d73c88da5468fe720b631e79045504669a8a046baf62777b85bdc3539890e76da331037d4baf3faea3524c39a1afd7ce7763bfbb44bc95697e961387f93de6153e4e1f62dbed255bf1e5375449fd5f599db229f33"], 0xa) 18:14:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe0000000}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}]}]}, 0x5c}}, 0x800) 18:14:22 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x66}, "7e7692d317ab52391b5ecb19e83b5c0baf376a1e31de5e1b5fdd0504d07d0937d6a0ef0e180dd9e61ace0ad47e2c0f6fd0994baefe4f4f05181e6fc7cfa5ee06414c5552e01fa5165b7ba52f602d97369ab60a777b0093731ef0cddbe8b2694f61b62698fd6d"}}, 0x69) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "73690baae5fbd9406735582059c769d43ac109f95afc3b8252ade1901271ea6e7a788fa1eb0c32d48181c1eecf066281754b9912f24154dc8e2225be0ce599bd6b532ba259862bf22f20c50763e847459e586e342314e30d873e762124e3f15142309c3e930f7bc7f2cdb62e837580d9ea26ec2326fe89db6cac1f6f58a71df443c748bd7b1ab142ca748cfebb5453344ec8cc0684f20f0fd737c66058c8fdc77b64b43f4772bd601081f87b02ebd5dfa84d7a82330bd88aad33fb7a972ed643f9740756"}, 0xc8) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5f}, "95174349dc43aaca418fd28245d5a18fac8f261e73e315512750a1754982c86f98c1cc157b5d1563209a8a0e8f1dd826d70c0e965362be7e3db724666a4f4876d84cd25bf88b51ba70a89e7515ed2248c4ef8ce2f415e787ec9c1a5b8b5f1c"}, 0x63) syz_open_procfs(0xffffffffffffffff, 0x0) 18:14:22 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:14:22 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000300)={0x38}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04c8cb000000000000000900376ab18bafd8dedbdc3286aaa6b638ae5b10aa1352049782bf07fa3f0c9df6041b44b3e84201ebd542a5690a7da248ad5edc5762fbabdc41000038"], 0xc) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) gettid() r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = eventfd2(0x0, 0xc01) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x28200, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r6, 0x5323, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r9 = syz_mount_image$iso9660(&(0x7f0000001ec0), &(0x7f0000001f00)='./file0\x00', 0xfff, 0x3, &(0x7f0000003080)=[{&(0x7f0000001f40)="947464dbbd73281cdf545bd400ee3cad125e672e69c3bffa69f716dfc858ce2032b6c27d80459376494ec8a6f1a64609ccaf3a93d95332b71758659a363b5cd6021ea353cd024b9ea3fe5e2fa15ff1c3a4520ac0bd97ea1fb47dab5053001b70ac86193e3c174185f4c23849b0a6ee95f07621617f515a2ad3988f0f6f27964b55b26912f9f9bc32975ac9f55ec7db0f6790fcbf4eaf49da47e47b670607952c4caaefdf71df5f4499a3289b094da879cebf845311cf84a2508bb29340ec9aed8c0fe9998468bdc574a351cbf1ab90f802ec8dffff47ce0fd3cde1cd6daf96a798e1839d83d8a6b7e12c0d29c0e52c6a20ec", 0xf2, 0x7fff}, {&(0x7f0000002040)="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", 0x1000, 0x100}, {&(0x7f0000003040)="829b3556012bc1191179442bad3e6ad7363cd615143e44f385b02d2ddbe897207b8d3e58f6", 0x25, 0x7f}], 0x100800, &(0x7f0000003100)={[{@mode={'mode', 0x3d, 0x4}}, {@session={'session', 0x3d, 0x54}}, {@map_normal}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@map_acorn}, {@session={'session', 0x3d, 0x51}}, {}, {@hide}], [{@appraise}]}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003280), 0x40000, 0x0) io_submit(0x0, 0x7, &(0x7f0000003300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xa4fe, r3, &(0x7f0000000000)="c2c2fc4b2c13901bfaf8f952e7028b9b5005eeb55adb140f87185745b0a188278c1bb568458621acd66c920486b98f83647486905d3f3eecffd3d98473e4f2fafa62feeef0210d8985c71d1d705f6ca5a9235336a50aa44a5781dbbeb69605112d963ff3fb3eb6a19c3727383f6b5d2307d3e6f9eb9f9711", 0x78, 0xfffffffffffffc01, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xff55, r4, &(0x7f0000000480)="edf7703658e012d7b0313bdcbdf0cb8e78a37c3521820672ea9a600d095236e30f6954f63dbb05237f2098cff7622923057672caa2dd2e1ce2126f2a2beb916658ba31d7858b949bea8a70d85681f62f2de27cd6aaaabaf4f78e5687f9c9e12f533f1849927ee4977e3ece530bee5a0ad90c36e3129ad0acfcfa3aace0e8ad69112cd9dce9e6e929318b4766fae299e2d8531290557f969ad87331f82029aaa3ca460edc34d3ef4d10d0a82f4770f8b561428d81d03d412e9229271f87689df4c9081e44", 0xc4, 0x400, 0x0, 0x2, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000580)="08342545ed695d3761085a433771562f62b5e3ae40ac03141972d2954893af5f9998e2ea00f669954bb94f0ef8b8df1d4d06267b9269f47da6317e9d97691897f615d2f2", 0x44, 0x7fffffff, 0x0, 0x1, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x8000, r7, &(0x7f0000000600)="ccdcf201a2587a91ab964bf6ed8ba55a5e516324755baee30cbf496c0c7a1d7eb516fd8d352ad6ad5a094d928dcf43b84c074c8514efc00b50275e3a01d1cf4426deea1fcd7cfc2f265b3a703777e805c0126692bae85e4b551cac07447d6ad36cb1ba492525d29b39e5c7320cd34ee26fe76fd2378108fd76f28f94c03bf8c362ac3ec1e40ad4a0a846934e17b29e193fcabb2e28dc44bb07b0827419117e3f32e87615148c60aad1b58cacf8b06e85bdf0cb1e00b0e50269dcceafd05f55f4682c6f9f324b9c6dfc017694af2c1a251b03faba699eee1e5852145d0e5f2690", 0xe0, 0xffff, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x401, r2, &(0x7f0000000740)="f45796e2ff67ea6b399c92c0bdb6d101ae185b601ded6cd8245e1223f343ae286d7b01cd50633c4ce35963c83e910e9707a5", 0x32, 0x9, 0x0, 0x0, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f00000007c0)="38199f0ba6b2ba52fc1f3c26f7791073cb76f89437ca19bb7c705c72a6ed004c84efffca511814224b9ccbb2f74418cc317c597c1f7310d3e3f4937ef6d05085200119f46a44be9817bc2556696c36f799d6b187107d008a801bfab7905a2e737e0b4764b1203c37a58e4edebfd97e38bec46f35ae8b347abd076ebe", 0x7c, 0x1f, 0x0, 0x2, r8}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x2, 0xfff7, r9, &(0x7f00000031c0)="26bedfe47316ade1e1efe5bb9d63129f7d044b4e461ade80bb26e73040a395a85c94c8e97518dac1d06d1ccf2beeff21d73f1a3c74c14685d843fa75c63567f69823c931c86bb89e428344adcec72cbc34d1be691c5661963c4ba624a472d42c4f14a99fbdcdb49de7b68dc733fbf25c5705258a72407c1307fd2882d6dee9e1c1cb7f7506c4f7c6c082bdb49f46745115aa180116e9edc0511cf0d143d7058b4cd7c04181eafcba92c1937142a9808a2bb8d949e287f6", 0xb7, 0x1, 0x0, 0x0, r10}]) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000090801022bbd7000fddbdf25010000020d00723000000000aeb5ceec92a88bd92ed105b1a0d685ca6e742739957c8fee44466df4ec0592a8bf79bfe4205c90b2d15b9c3e2840b8cf134fc42eb88ec9837f7f1562e72b844009a8ce946f9cdf48ba88ffc4a1b85acdceace5c7b5ffd47c612487fb61a2584901b7a513da57f38325d0b451cc1d"], 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4001) 18:14:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000099c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000009b00)={&(0x7f0000009a00), 0xc, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x24, r5, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r6, r0) [ 537.177398] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 537.177480] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 537.179989] Bluetooth: hci6: SCO packet for unknown connection handle 200 18:14:22 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 18:14:22 executing program 7: r0 = msgget(0x3, 0x4) msgctl$IPC_RMID(r0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207b46e3c3642710db35425d428c54db60000000000"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:14:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 537.181277] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 537.229041] Bluetooth: hci3: Malformed Event: 0x02 [ 537.244189] Bluetooth: hci3: Malformed Event: 0x02 18:14:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 537.299502] Bluetooth: hci6: Malformed Event: 0x02 [ 537.308754] Bluetooth: hci6: Malformed Event: 0x02 18:14:22 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04020700000000000000e11172564b385b41a122577d671df62febb94018f5a57b69ec6d1670497d59bb46a89801fb365f5e3016735272558513755a82b794bba5c9e0a98fd4145c69cb5c2da7"], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe4}, "7d414338d9ba30cd4014473d07555a3c6f158c928c2e04d3361bfa0280d31b574acbface5acc131b5c6e1746f6a7ade165fa7e00cb2ddf7d3c3257f56d5e11ee85d45e68dd73a7c3da28a2b7bca33114c4ef4edd25569c5991629d904d2c06cd80d21d1d024518e7c5d90cd59938ff3ffada67f5b5602a17d48cdea7d744807379d2eb14d584e8c28bb8d261792b63fb4c0c9daffb14f922ecaf1ace4405d320262436626b96fe84dbd9fb26578db09fe546110a0a8a05f32c2a5c7e484e60ddb77e34b08332dba8828a36a4be4c8d63d69f0a46185ad61930901b6eafd60f4314ac0dd8"}, 0xe8) 18:14:22 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 18:14:23 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 18:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x700, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x4}}}}, [@NL80211_ATTR_NAN_FUNC={0x7c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x69, 0xb, "239c66c82a738e517abbb0dec85a69fb23f0f2be0dd8d7b8c5cf1de68f03532b725a1d8022cff3921efc164e8498071440a236a2de690808165ef1c74b172224b1b70bfd81645800303247946b50a3c4acd94af71286309441800368656c9cdc08ad2abe6c"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x13c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x27, 0xb, "b911f81d0b1952fd2541fca27d55bf3a74fa53dd252d4157ebc137dbbd0f0ae73cfc9f"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6b, 0xb, "7e53fc9fbe9c3f3fe8baa33cdebfadccf9e796c15af618ef88e4e9d77a6b5ba2a5008b5437e79426273017b512ba11b40a6e18b3413f0516edbb43e339e9e8868afe37c98c0dd32513a791f37022fba952a9c7a0aa933782d1cdf8f13d649361c54ebfd1603b4b"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x98, 0xd, 0x0, 0x1, [{0x4}, {0x33, 0x0, "8ead602e3f753636459d2f9699043a46b2f364db4881d37548606cb9dac6b7ce97fb548b7c7e45b789aab28a9d0b0e"}, {0x5b, 0x0, "66b2255a8ac588a067272fd156b9e23b14c976faf86c68ae45d3cfcd3d8ea026ee8551d6f3df3d587c98e25ac1d1f6e185af466199e0c708ea2765fee51c94ecd928e284fd40b372c5e1c3521d1416b9ca2850eabd1350"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1000}]}, @NL80211_ATTR_NAN_FUNC={0x51c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4fc, 0xd, 0x0, 0x1, [{0x74, 0x0, "8ca96b3c1e097b600cd36067d88aa4593598c00f04c0a715c0a736df2cec43664b49390159784cda6ed36efea9cfa4499e97e56a112258244db29a9ec611809b33c5878197a4f24cbe96b25306daf75eade751309c743078a5be6708d5f973a10064a73ff705a4f8a024fa8c6d54915d"}, {0xf3, 0x0, "26f660a237a90009f1b5ebf4cf607828e247702b18fb2d454de9d671f0694b4758713333617d4e70840ebed4a9e55596324999c9ebff87aa5c22546645a2e1c925273040fbe754b76e602d72e4f6a89890adc8c6f2e0f83a31bbd04e88e141c6231ff50b2ed4f4f3c94929beb9f11f67f5e7bcb499db53b3c7daeca9850b7ba93aad8f932faf7bde8067180eef871d3fcc50f2707aa571f5ba0ef1c54be4e03771e7a18e4d2b4b29106561693f7ffd0ba4b3a7c6e660403b1a8eadf0adeaacfc323f440e88cdd67dfccc44073bd72453ccc595030c606797ada841f52add770a7b8ec9c62af254f807664b96947c78"}, {0x8f, 0x0, "60d01c13431127e33f6abd2cb24887318a0c80176b8c5bea72e5ec0b97b8ead1c5325353b2b955958707e249f5db38ad8fac5cf3930dbb37ac3b6cf19df685f9e0494a1b5bb49c6c35d825cacd688f36f882988ce5a3d447ca20eb629c9b7090acb5c21b6e3cf828c66f7226de483772797c7e034948433f77e047f4eb7eaaba93ce3b1c239a9fe2a0f506"}, {0x2d, 0x0, "1d4721268395187a49abfa01fa10a06fd0882c14c1db29e905d10ccd862ee9d338828f985ab8f30d5a"}, {0xfa, 0x0, "e4e141c0f12cec6282767ff94a255c8e71ba17db11ff703d60286f161a07010839c37e6686e9b162e1a86b69ab573a23ed3c4fc01ed30b1d34eb6167fb8185dc9a9d2791cbde9d609be456a38038ffe34c8dc140fc0856a95c711c40c335788db75aa088b650bcb42af2cfddf70e64bc069d6b64f964d44eec1b1d099e873b4199cf60e3b337eaf2baa288ddd8e021169b4461e91e438efdb5011374cf2a6fc509b43185efed1e4308e60ec2101259fd3da73aadbeb4d05931c7893e98556d4e734f6da7c2cced1fba34a9c3279f651eb10b38e23fc02be26f49c7f58b393277b8cc28a5f27e48d7fb5d1d2a741f292b509c57243f9b"}, {0xe4, 0x0, "ad699c7a4ef4dbb430bdc0542a077cee9bfde1280f0112b536b4ba7615213b689f603f0d18430a966a8fd8d95ce7e633ebbf55b4909c6873fa450750c971d12f89a878a72c9467e1c0b5d8e2fce37fcf419e6d68276ae8c872bbdb44ffc9db6454af24eca6aa32ee017b1697039a095bc93df574bd9b40287606b21c01bc66caf430c3d4f9bf13fdd3fca60d154317f9951419150508c3c2b4dbba9e35894e1e0134a66c07a1fc147efc6255b6e0f56bd0a08173f6f794c0b19c5b7a792d7acbfbcea7ca43ce03da8d00716d26efb9cf6c888d30a6fc03fcca9a55d9a856666f"}, {0xef, 0x0, "18925582fd9a75c74ea421ecc059a1c2aeb14ec131d7211c1fc67e088d11ba99bbfd52193fadd86c17137d52d448e5b1c06d5832330609976a7e5c358fe95fd2ca95e1f153d75515f7c1316f883e2fed426052b890126df2d730922decba6554ff6cf1a00e06e27ab376a23b562fa690ffcce970580f90d50a3db78c4ab8634c09aca8b99fa73ec67649d4ae790bb35e60c10eff01eb54f82c0a2076d03ffeae811aa6ae5fb715fea928cf754b6ae7c1350fd31ca608c44100a57ff5169af5b0a22f558d93791a3a1adff19f3a338ab994633d1187530cb127fd362e06190f2a51971d7701590fa56cfd57"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x81}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x700}, 0x1, 0x0, 0x0, 0x24008054}, 0x4000800) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:14:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x168, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4a}, @void, @val={0xc, 0x99, {0xfff, 0x37}}}}, [@NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "5521ed40932ba8f51c9716c2725a431dab9cfb57cd8a07a9b7e5c7d9b1e300d5c244fd78b513f070e27b8aa4eba5c64c58e6b4e171a71a47f5a1f6dc28bc6f574c407bb7f4af038b2c5e58e88976f438bbf7f1482028506c7b7dcfed59293ed59e9f92fc5a808d1155063c00a8fd1280d6962d9696b58fb479231b96ac333ef1671ad7ee5389a12baa15d28ef16d216c67d4"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "91ed3dbf9f8427f4b9c7659f1324a272978afe50630a140140c2d5297434740e01594ced307da1c6135cd165870ac19c2ae62daecb86487baa3981dfa63e9bb292f31944de2ce317beb8629e43e6518387c2ae6b0b2f33eec849d136c7da30dae426a3772115491ea62753433e1d3af72929bd"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}]}, 0x168}}, 0x20000000) dup2(r3, r0) 18:14:31 executing program 0: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x100, 0x114) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xffffffffffffff7b, r2, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "39427c990d4bc1892f2b2b4b41eeb428"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e0ab8c370b6cf953d2311d8542f5fcc8"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "46999933dfb052f04382e6b24c0ab355"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043209aaaaaaaaaa000009004707694f5b116ec1a70ede64f7ed8bfb37ba8c42a9957c8f2d657e15bc39389716af45b7fb929b7860deb60bfd7498681ec5ea"], 0xc) 18:14:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r5, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c010}, 0x10) r6 = dup2(r3, r0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d610500000000000000746963617374000500830001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x20040014) 18:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x50, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}}, 0x40054) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:14:31 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7d}, "f43bcc95701b37956233a6a41f7d7056a765f7d76047fdde781636eedc1443aa203f97d68f7a817d22cb5a0c21c79cb1dc966f39aa47f7420e0c546f7a46b15cac7da068c7bbe3ed7a17d341852a64dd0fb5fbf5d163920ed678f444564745117b15b41246c2cf5f3435a5164997843c600782f2187217c8b7cfa6c3c6"}, 0x81) syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1004) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) fork() r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) r2 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000011c0)) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)) r3 = getpgrp(r1) syz_open_procfs(r3, 0x0) 18:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:14:31 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x26}}}, 0xa) [ 537.495336] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 546.125647] Bluetooth: hci6: Malformed Event: 0x02 18:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x8000) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r7, r0) 18:14:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:31 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0xd7, 0xe}, {0x7, 0x7, 0x2e2, 0x4, [0x0, 0x302, 0x3ff]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 18:14:31 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) [ 546.130256] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 546.237811] Bluetooth: hci6: Malformed Event: 0x02 18:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) r4 = dup2(r3, r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xc0, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000) 18:14:31 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x26}}}, 0xa) 18:14:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:41 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0xfffffffffffffffa}, {@none, 0x3}}}, 0xa) 18:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="fda09866e77a3f22e74b1acedb68249719d768a7e577f990d0fe3fb3af46e2e7b6761f3b7190a870762bc30af66c961df3f59b80681a183669ba0a2221ee6eaec5fc719d0b47f97c09f31a610f42ce5d0bbfc061ce46f63b04821a2ad00ad255a106c55d1528bb6c8f220abc2d8d853ef2c681159ae6ced02524c6b4bed604390a8e6d48a39b7dfb8ebc365cd0d87f118c3f9f7ae078be38f85a0cb902e5f83333a899b32abf8a3e3f1833d43dd6cad5aef1c534"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x22}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x800c4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r1, 0xc, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xbae5, 0x49}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) dup2(r3, r0) 18:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x26}}}, 0xa) 18:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x62}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r8, r0) 18:14:41 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x31}, "0f984975a6ccce7bc4eab258fae36754f7d03d08fd7cf08031041fd3330571e5a77615891ef7e5b9e866fc81e08ace21ca"}, 0x35) 18:14:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:41 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:14:41 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9c012000e00050015000a00d7f6010005f1ffff7e0041b8a89eee2dea2cadac77843bf6fa82050000000000000097b3232a59c511286dda3f1c03f4dbac3df16da06232b7fbb46c3e41eba8f130b8717cba6b08e3c6a53b83d9d5b1d3091aac791c72e16b5580cbe2cd6975566238d381b577ad5cae922da9ce3546fb91348a99b70b1763ef7680"], 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x48}, @l2cap_cid_signaling={{0x44}, [@l2cap_disconn_req={{0x6, 0x58, 0x4}, {0x830, 0x79}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0xaa}}, @l2cap_conn_req={{0x2, 0x7f, 0x4}, {0x2, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x3b, 0x2}, {0x7}}, @l2cap_disconn_req={{0x6, 0x8b, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x1ff, 0x200}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x7, 0x1}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x3, 0x4}}, @l2cap_conn_req={{0x2, 0x44, 0x4}, {0x6e3e, 0x101}}]}}, 0x4d) [ 546.238860] Bluetooth: hci6: SCO packet for unknown connection handle 200 18:14:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 556.363257] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 556.367100] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 556.399053] Bluetooth: hci6: Malformed Event: 0x02 [ 556.408015] Bluetooth: hci6: Malformed Event: 0x02 18:14:42 executing program 0: socket$inet(0x2, 0x4, 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x45, 0x80, "3cfe89", 0x0, 0x81}, {@none, 0x6, 0x29, 0x2, "ea817d", 0x2, 0x4}, {@any, 0x6, 0x8, 0xce, "dfe0cb", 0x9}, {@none, 0x8, 0x2, 0x0, "0cc9a6", 0x6, 0x8f}, {@none, 0x1f, 0xb3, 0x5, "4da855", 0x7, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x93, 0xa3, 0x0, "c16541", 0x8000, 0x7}, {@any, 0x3, 0xc5, 0x0, "a234f3", 0x1000, 0x6}]}}}, 0x6d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 556.436883] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r2, 0x301, 0x20000000, 0xfffffffc, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x773, 0xe}}}}}, 0x28}}, 0x4800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r6, r0) 18:14:42 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xfffffea1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffed8}, {0x57, 0xc9, 0x4}}}, 0x7) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80013c962bc300ffc6081ccf2a348df5c64466dea285591dbf2f99f7ea7bb9f0e976b45d2f6a9272e362077783b834422334147a718e16b1c33b2ca16a03e1dc15da3461d18be503df49bb8b25ef03571137d53425a593a918f6e0ac4f57488dd66f1e03508eceb50a3ec6b3854c149e4720bef678671aa2d0e58c335f2fa98d208b4ae0b84ef607722a2fd630448bba4e520e52609c2c492df50ea0ee59c5e4c35da116f0c98e6d249047cb324a30afb656493ee68a5a959aa37f3"], 0x17) memfd_secret(0x80000) [ 556.541957] Bluetooth: hci6: SCO packet for unknown connection handle 200 18:14:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:53 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x54}, "520f698270c3a734f5f444d046da873881f938b85c18d026fff0975e543de0e51e24ac96198d3beb16846c1ddee551d3ff11b75732045ea6de2495716262b4ee8d8a74d8f0f72d29052dd15c00e6969aaf1c14c8"}}, 0x57) 18:14:53 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="443209aaaaaaaaaa00000908"], 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{}, {@none}}}, 0x20) 18:14:53 executing program 1: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xfffffea1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffed8}, {0x57, 0xc9, 0x4}}}, 0x7) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80013c962bc300ffc6081ccf2a348df5c64466dea285591dbf2f99f7ea7bb9f0e976b45d2f6a9272e362077783b834422334147a718e16b1c33b2ca16a03e1dc15da3461d18be503df49bb8b25ef03571137d53425a593a918f6e0ac4f57488dd66f1e03508eceb50a3ec6b3854c149e4720bef678671aa2d0e58c335f2fa98d208b4ae0b84ef607722a2fd630448bba4e520e52609c2c492df50ea0ee59c5e4c35da116f0c98e6d249047cb324a30afb656493ee68a5a959aa37f3"], 0x17) memfd_secret(0x80000) 18:14:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x98, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x54, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1f}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) r12 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r12, r0) 18:14:53 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x29, 0x1f, &(0x7f0000000100), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x5323, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = syz_open_dev$usbmon(&(0x7f0000000500), 0x6, 0x101800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000002580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_submit(0x0, 0x7, &(0x7f0000002600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000100)="67170623c75defd723c62384adb9a2476a336d51f0e7cd0e6ef1d16fc499edcc9978b9b5f08fbe024f4471f791734db25b8a1b98a414b4a702258a2ba7b7710b66aa189024aef472bb09413ba0205c50e44664c98ad2", 0x56, 0x7fff, 0x0, 0x7, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xfff, r1, &(0x7f00000001c0)="10389f966b3a24d8363ef77c9cec88456b937761874046b345659382a3750c5205c8ec9c5f7578be2c6574d050775e01ff0e7756492646c08281", 0x3a, 0xfffffffffffffffa, 0x0, 0x3, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000240)="e780c3a3f77e5a3e6c561d609bf9d62a452b2301f2d08d6dbf8bee7eefd73a4f60e384d5c6eb5b251e35db4ccb97e45b4c8e543fe750009a751350df58c9710878db969894e260aa4070cb9b4699d2b36cbd49f30b5b933d219481c4290bddeb00dd24", 0x63, 0x2b, 0x0, 0x1, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x4, r5, &(0x7f0000000380)="9b3b5173ef4276c5bad32a0a3754d9da124054cc20e289b68210d5d307d089d4870df397aed7cb04ae0fc64eaf5a5248377388dbadf21a4ddf9d1b622d8b2e050e3ae1b4df5e09299db73ee0cfd0ccca05f112fb55a68b2ecff4d9e374f2c1b05549", 0x62, 0xa8, 0x0, 0x1, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000440)="f7f31f7a757cb68a3383f893ef66defe70c637e27d272629b99afd4bf95bc717ce24da3bc4b243658d8b33693c7b63c9af0b4c82", 0x34, 0x800, 0x0, 0xae121a185a27afd7, r6}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0x5, r7, &(0x7f0000000540)="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", 0x1000, 0x6, 0x0, 0x2, r0}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x8, 0x7, r8, &(0x7f0000001580)="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", 0x1000, 0x3, 0x0, 0x2, r9}]) 18:14:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 18:14:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x9000000, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x3c}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "7eedd8252ff04a44bab9d5d11db008bf2dcaa49f2b2b89ef9d98577508a1ce161f1b"}, 0x26) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x1f}}}}, 0x11) 18:14:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 556.544076] Bluetooth: hci6: SCO packet for unknown connection handle 200 18:14:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043209aaaaaaaaaaa9000911d84c1e3c008e7cf2aa2d871671b57af8c983c4eccf4b66332aadd8c7a40b52dffc0e082ba2196bab7975a52d92ce28ff00000000000000db28745ae761956321ddab50e98952c4c3163d9f0f43f2f847e1c94189e084f110"], 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x78}, "4b2e25849ef95ef2a45c98888f79bbe1bf7e7cd6635b9759b7d229c690d986dbafea8fd4f5a41a323505c92ca83ba7a93f35da589dfd25ea9a3421e3f419c441bc599eec223db16c28e066b5004ed9c8abd81c8f6a097a351c63ce3300890c1784530be4bfa1ba5de0a5535633e16eab4529c22691d93a51"}, 0x7c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x241f}}}, 0x7) 18:14:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9900, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 567.584254] Bluetooth: hci1: unexpected event 0x16 length: 29 > 6 [ 567.693142] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:14:53 executing program 7: syz_open_procfs(0xffffffffffffffff, 0x0) [ 567.765319] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:14:53 executing program 1: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xfffffea1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffed8}, {0x57, 0xc9, 0x4}}}, 0x7) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80013c962bc300ffc6081ccf2a348df5c64466dea285591dbf2f99f7ea7bb9f0e976b45d2f6a9272e362077783b834422334147a718e16b1c33b2ca16a03e1dc15da3461d18be503df49bb8b25ef03571137d53425a593a918f6e0ac4f57488dd66f1e03508eceb50a3ec6b3854c149e4720bef678671aa2d0e58c335f2fa98d208b4ae0b84ef607722a2fd630448bba4e520e52609c2c492df50ea0ee59c5e4c35da116f0c98e6d249047cb324a30afb656493ee68a5a959aa37f3"], 0x17) memfd_secret(0x80000) 18:14:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 567.814451] Bluetooth: hci1: unexpected event for opcode 0x241f [ 567.818332] Bluetooth: hci1: unexpected event for opcode 0x241f 18:14:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:14:53 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x4f7}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x0, "4307b2", 0xc6, 0x40, "7e3de67381aaa3ca5493977d6641cc72439b3be34ece4a352cd5a3e004508125c7620f91fefa03fb0c1b09d67816dce228b971bc64247e738164cd4ebd1a50294ce04e7c6f3fc782581ae51e8afbf6f70a20510741ab8e9f36fd931e3e8ca5deea11b290e2a8219b0f956817e795f40bb6ad1cd2ab5b6438b4317468f51b75335e3728cb97eb31256c3a25d261822a29d51c889339a938c4a9e2e048a10e0c2568708a56f7f451c44ae4fbf1764790c35ef1adfa2eb51f30dd022ad7759b81cb7b18c0e55902fee993faecacd91ca395da80932144c6c1a30378adc8fab6a53b64e5d37daade04f13219275a18cd8b69"}, {@any, 0x1, 0x2, "ecf8e2", 0x3, 0x2, "73c53b1f875893ec9e1c8436aa13636033ab42c8a6d40e640446f892db68d189d286c7215997992bb5061a5efb9189170d8edf6899b90f2e06846eb62d5e0107282ead97d1ff1ba10c5062a2ff66e572dd0a60797be4f93b379fd26f7cd81a56c085dd96462982b7e199b8fa63d349fc06b9a0a1cf3b57bec2dfd0559317c53cf42c2d8b913c87717610c796ce9cdac1ef0c9f02c614b5bc3ed70920aac876e2502b20eee04b82d6dfc0765c83b7a1d93ef958e6dcdf85205ea5697597bc00a9924b898aa9e26584842d87d831934422e1bd71acf99bc8f2b2b4f4c69bd3efb6b2ad88e220abef00672052ca30f745b7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x77, 0xff, "a8fd07", 0x4, 0x40, "11cb5a27b285eabc977f932d88b9912437b212b31958ffacf200a471aa50e850f13f266407f55b154186c691c37679361c6fbb43f7f19175adeb7e4481c544d7a4f6397dcc273f4f4dfcb55e33c7866dcca7135ddc6bd7e54d40a5d8277dbadda5d4033a4c60d8e8e259138c9f7c3c35603522e1d4df8c1d790ed90dabc738f968e27cec27d5b8e717c053cd56604ade0d06b4c80702872e1632a0702d2bf77bcf0cc59b9e36cd49af0602af8ae184965a9be900b11b1fc5aac1b3747951b6aa9ac2fe04f5c64d0a928e348dd4712a765dd6a6e374fec3d815f86c77a2e4512c6a37c6216d8c48a1185abc03e15c1c9f"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f, 0x81, "973c98", 0x7ff, 0xff, "7c5210d767bd825650da6dcbe7e468620b7619f65e69d8a3d7185a0bbe4b470d24e596058848cc497c16fcdd6bb6cd953543113120e1c90d4e099dde00d28118f3d0c4c2370d7effa70fe4e6aef19f07a6d73f04dd84d53ca1658d515aefb8517b1323baa600abeb8e9324e8fd0e3ab54a0df4afb8179b9b6848615f04e0196092a54c098d001d4d89decf1fc78765c55d5b23270ec4af7533df0e98a4f06eeb7f415a6d4cc054ecedb2af3ca5484c503bfd3be6f0617e40685ed8c5e5d3ed0c59a2e94a13483497089f1cc6c429e4c7f543ef4d81a4c889eeef68fbac86a188f53942233f028614f2521d13defbafe3"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x63, "d9d417", 0xe8, 0x0, "24aaa14d786bbe1e1665dcfdca36ae2dff98785dc3159a7b99569ef1c9500c3af2dfcdcfef298add2bcbc7f3946776bc23c9bd6900ab21597d545b4531115b293de55be49fab18828fec2d751562056c82ac6f303f180cd79a34dc1c1ba6d28b167a72bb25338f8fb9f48fbc91d5e515889e542e1515f0d8138ffaccc461e6bb3af7acd5a66b3683a0e2eb6a84786d2c6f718dd3c8fe0be1d6aa81218a0ecf878fc9c2c15a2a49a9021fe9c960bd5586ae7eccebad6026f84a95f1553a4cd0a61f4ef340166766701b44fd73d54e898d9ec9f635a78aa5c323a8d65c21fef3033932a3a671975386f329fd604b11df2c"}]}}}, 0x4fa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2b}, "d1659cad2cac75b9ca25626cf24814a8b6ac6c4bb9a7346e9f7b33043793e7a1f9dd25f1ae88ff0268149a"}, 0x2f) [ 571.868372] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 571.870144] Bluetooth: hci1: Injecting HCI hardware error event [ 571.873047] Bluetooth: hci1: hardware error 0x00 [ 573.916272] Bluetooth: hci1: Opcode 0x0c03 failed: -110 18:15:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:02 executing program 3: getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180), 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xffa6f331da821bd1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3, 0x3, 0x6, 0x74ec}, {0x517, 0xf7, 0x7f, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x2, 0xc8, 0x9, 0x5, 0xfff}}}, 0xb) r1 = openat$incfs(0xffffffffffffffff, 0xfffffffffffffffe, 0xa4cc0, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7f, 0x4, 0x7, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x8005, 0x7fffffff, 0x8000, 0x4, 0x3, 0x3f, 0x1, 0x0, 0x10a4, 0x0, 0x6}, r0, 0x4, r1, 0x3) 18:15:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xab00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:02 executing program 1: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xfffffea1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffed8}, {0x57, 0xc9, 0x4}}}, 0x7) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80013c962bc300ffc6081ccf2a348df5c64466dea285591dbf2f99f7ea7bb9f0e976b45d2f6a9272e362077783b834422334147a718e16b1c33b2ca16a03e1dc15da3461d18be503df49bb8b25ef03571137d53425a593a918f6e0ac4f57488dd66f1e03508eceb50a3ec6b3854c149e4720bef678671aa2d0e58c335f2fa98d208b4ae0b84ef607722a2fd630448bba4e520e52609c2c492df50ea0ee59c5e4c35da116f0c98e6d249047cb324a30afb656493ee68a5a959aa37f3"], 0x17) memfd_secret(0x80000) 18:15:02 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{}, {@none, 0x1}}}, 0x38) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000001100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x2}}}, 0x4) 18:15:02 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6f}, "16e49fadf4876fd7cbf74f40abe2e2a79b2bf2cb787bc91df1c316aee90d3f3abc8cf4baced84db01851b6f3f8346e56a27baa74fef4a2d77497d17d2feb5dbf0f223ad775578b7381975bfdc1bdf2d079712c9ac8345df3c244b750bc68ef71182aa8d49d1f92ee507eff3cf6a6d0"}, 0x73) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x8, "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"}) 18:15:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) r11 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r12 = dup2(r11, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) sendmsg$GTP_CMD_GETPDP(r12, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x800003}, @GTPA_LINK={0x8, 0x1, r13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 18:15:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x59}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8033d6771940ac2c) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r7 = gettid() rt_sigqueueinfo(r7, 0x0, &(0x7f0000000000)) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x0, r7}) dup2(r6, r0) 18:15:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) recvfrom(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x40, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) [ 577.165438] Bluetooth: hci6: Malformed Event: 0x02 18:15:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:02 executing program 0: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2b, 0x1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0xdf7, &(0x7f0000000180)=0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000001c0)=0x10) 18:15:02 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 1) [ 577.182540] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 577.245048] Bluetooth: hci6: Malformed Event: 0x02 18:15:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r6, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x800) 18:15:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:03 executing program 3: r0 = memfd_secret(0x80000) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000002c00), &(0x7f0000002c40)=0x4) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x904, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 18:15:12 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 2) 18:15:12 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x46, 0x8, 0x5, 0x0, 0x1f, "3a3bf3", 0x0, [0x3, 0x9, 0x132, 0x5, 0x80000001, 0x7, 0x8, 0x94a, 0x7ff]}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb8}, "0c9724821e09aff537681384a0531d882992c9a7d6d387602df51afd88e12425a567a770954a87f1a8c6f68f6e70a8ed42fa86ee6c56c339abb997e32aa468f5df3816fb6fc899516d2fbcfad41f46ded3c265cb17563f23cc15194c74cee63344bdc0f7af8c306c090c2b420e932f67d6c35265665e038234144533c2ca5f88c798772e32a0273898de5e6a25a386297224bb366f44a38f52a0120041e25331e427b25b365eca3b14c453d7727cd43823988768b590af7c"}, 0xbc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1d00000000040000000000000006000355e5cfc86219796c5aee5e000000000000040000000000000004000000000000000700000000000000"]}) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc8}, "bcd370bb075e69f4c47699be583c0079a6c9b727ce174d9fe7f24b262456783a22472bedaec6d995d6d88429bc12b773a95e82d5600540f238face15ff7df37dec37e6f5d5bb62ef369756d0a0ab218c54d56d1efa2ac4752f18174d919b0762f9bad2fe492089385352cb445bb87e52c850314362fba5c3865e3cd87a545aaf6a94c5832f937f03b10cda569f45d511b7f75d9f6642165c43a50aaf13e0cf65603bb3cd688049e30b89b690621effef3f7ba3169a897a3f14c5cb0053851d57e10d94eac50898cc"}, 0xcc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0xe2, 0xc8, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0401ec560d6b00"], 0x7) 18:15:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x3, 0x1, [{0xc9, 0x20, 0x8001}]}}}, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) 18:15:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:12 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0xffff, 0x2, 0x5, 0x2, 0xc7c}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2}, "20e0"}, 0x6) 18:15:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) dup2(r3, r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffff52}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x40}}]}, 0x44}}, 0x4081) 18:15:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = dup2(r3, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r6, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x42}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x40800) 18:15:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 577.249811] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 586.958116] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 586.975261] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 586.983874] FAULT_INJECTION: forcing a failure. [ 586.983874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.984868] CPU: 1 UID: 0 PID: 6059 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 586.984887] Tainted: [W]=WARN [ 586.984892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 586.984900] Call Trace: [ 586.984906] [ 586.984911] dump_stack_lvl+0xfa/0x120 [ 586.984935] should_fail_ex+0x4d7/0x5e0 [ 586.984954] _copy_from_iter+0x1dc/0x1660 [ 586.984970] ? policy_nodemask+0xeb/0x4e0 [ 586.984992] ? __pfx__copy_from_iter+0x10/0x10 [ 586.985006] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 586.985022] ? __pfx_perf_trace_lock+0x10/0x10 [ 586.985045] copy_page_from_iter+0xe3/0x180 [ 586.985063] tun_build_skb+0x2db/0x14c0 [ 586.985088] ? __pfx_tun_build_skb+0x10/0x10 [ 586.985105] ? trace_mm_page_alloc+0xfc/0x150 [ 586.985121] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 586.985144] ? _parse_integer_limit+0x181/0x1e0 [ 586.985171] ? _kstrtoull+0x13e/0x200 [ 586.985188] ? __pfx__kstrtoull+0x10/0x10 [ 586.985207] tun_get_user+0x153f/0x3970 [ 586.985235] ? __pfx_tun_get_user+0x10/0x10 [ 586.985256] ? __pfx_perf_trace_lock+0x10/0x10 [ 586.985269] ? perf_trace_lock+0xb5/0x5d0 [ 586.985285] ? lock_acquire+0x15e/0x2f0 [ 586.985299] ? tun_get+0x23/0x2f0 [ 586.985328] ? find_held_lock+0x2b/0x80 [ 586.985346] ? tun_get+0x133/0x2f0 [ 586.985362] ? lock_release+0xc8/0x290 [ 586.985374] ? lock_is_held_type+0x9e/0x120 [ 586.985395] tun_chr_write_iter+0xd9/0x1e0 [ 586.985415] vfs_write+0xbe9/0x1150 [ 586.985430] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 586.985448] ? __fget_files+0x34/0x3b0 [ 586.985460] ? __pfx_vfs_write+0x10/0x10 [ 586.985485] ksys_write+0x121/0x240 [ 586.985497] ? __pfx_ksys_write+0x10/0x10 [ 586.985515] do_syscall_64+0xbf/0x360 [ 586.985527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.985540] RIP: 0033:0x7ff02a5455ff [ 586.985549] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 586.985561] RSP: 002b:00007ff027b08150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 586.985573] RAX: ffffffffffffffda RBX: 00007ff02a6a5f60 RCX: 00007ff02a5455ff [ 586.985581] RDX: 000000000000004e RSI: 0000000020000100 RDI: 00000000000000f0 [ 586.985588] RBP: 00007ff027b081d0 R08: 0000000000000000 R09: 0000000000000000 [ 586.985595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 586.985602] R13: 00007ffd415d0daf R14: 00007ff027b08300 R15: 0000000000022000 [ 586.985619] [ 587.010236] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:15:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:12 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7b}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b00a711961481a66c5400"/21], 0xd) 18:15:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r5, @ANYBLOB="f274b6c94c82b43a5cd451a7f66c39dae490e83e417fc503f606a2cf1b"], 0x1c}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) dup2(r6, r0) 18:15:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0xa) 18:15:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r3, @ANYBLOB="55ed57ae03fc9f8f9b8a9e35c23c0e165a9ca0222db9b9d8cee82a329a87e39338436d9eddfda5a40c19525ca148f678b31b6adfba3334f5f7d26ccc1edabc9725f899bbc97bbdcb0acb805e58f84647bbdc88376d6ab28eb7355f17bc71a6a6035280439a0bee059763e03554214320c94a2aca0cfbd0c2c3983701c5531f8aa6a1e891f1b953a9e150818156e590f37de5a8b87103d526ae164a245c8165dc93a666e9176f4c491ceee89c5009c78d4d29b820bf9dc6d1c05eef726c5725dba5a4630fec1e1955b03f5f82607ab7e944c473c369a6f21dd4beb2b32259ddcf3313f7199f3a7b722d119cc4d22f90585db69783367bce1cf379d0"], 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000100)={0x2}) dup2(r4, r0) 18:15:12 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 3) 18:15:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:23 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 4) 18:15:23 executing program 3: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/213) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:15:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:15:23 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\t\x00'], 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xfc, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x9, 0x1, 0x4, 0x2, 0x7}}}, 0x14) 18:15:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:23 executing program 7: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x6, 0x9, 0xfffffffffffffff9, 0x33, 0xffffffffffffffff, 0x81, 0x0, 0x4, 0x7, 0x734, 0x9, 0x9, 0x40, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000100)={r0, 0x5}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) 18:15:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x188, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20, 0x4}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x0, 0x4}, {0x9, 0x5}, {0xca, 0x7}, {0x0, 0x6}, {0xd8, 0x5}, {0x5, 0x4}, {0x7f, 0x6}, {0x4, 0x5}, {0xbe}, {0x3, 0x6}, {0x6, 0x1}, {0x8, 0x6}, {0x47, 0x1}], "5b9f7c9753c6e13f"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x7}, {0x9, 0x2}, {0x3, 0x4}, {0x9, 0x7}, {0x8, 0x1}, {0x1, 0x2}, {0x45, 0x3}], "a360be1c37ff046d"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x3, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x3, 0x6}, {0x7f, 0x1}, {0x4, 0x2}, {0x7, 0x1}, {0x3f, 0x3}, {0x1, 0x2}, {0xfe}, {0x28, 0x4}], "e4d5042af9329701"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7f, 0x4}, {0x3, 0x2}, {0x80, 0x6}, {0x20, 0x5}, {0x2, 0x2}, {0x9, 0x3}, {0x4, 0x5}, {0x3, 0x2}, {0x9, 0x7}, {0x40, 0x4}, {0xcc}, {0x5d, 0x1}, {0x40, 0x4}, {0x1f, 0x7}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x7f, 0x4}, {0x5, 0x7}, {0x80, 0x5}, {0x1}], "c969e25aaf42f959"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x3}, {0x40, 0x4}, {0x8, 0x7}, {0x20, 0x3}], "207f09a10505ce72"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x7}, {0x81}, {0x90, 0x4}, {}], "72ac2731d3ba94c4"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4, 0x2}, {0x3, 0x6}, {0x20, 0x7}, {0x6, 0x7}, {0x5, 0x4}], "8c47e24db37249d3"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x7, 0x1}, {0x9, 0x4}, {0x9, 0x1}, {0x1, 0x5}, {0x7f, 0x3}, {0x0, 0x3}, {0x3e, 0x6}], "5bd50fc097018da9"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x2}, {0x3, 0x6}, {0x5, 0x5}, {0x9, 0x4}, {0x60, 0x5}, {0xff, 0x3}, {0x7, 0x5}, {0xd3, 0x2}, {0x6, 0x4}, {0x3d}, {0x77, 0x2}, {0xcd, 0x6}, {0x2, 0x2}, {0x21, 0x2}, {0xff, 0x1}, {0x6, 0x2}, {0x7f, 0x3}, {0x7f, 0x7}], "354fd3065905940c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x9}, {0x3f, 0x6}, {0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x7f, 0x5}, {0x5, 0x1}, {0x7f, 0x1}, {0x7f, 0x4}, {0xb0, 0x5}, {0x46, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x56, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x5, 0x2}, {0x81, 0x2}, {0x2, 0x7}, {0xad, 0x6}], "83eb4b5762f03076"}}]}, 0x188}}, 0x4000000) 18:15:23 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043235020000000000000900"], 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 18:15:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:15:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001df7115295690e6bb76408000000db68d8e9bb035c65160c9f568801af210013ddb71fa4fd867576d8b2eaeba501f4aee14427f5aec02a165c47db8d44155afc5e8ec93811b80eb233a9f11dc5c5dfc476c4f541947898713a8c55ab553e62674bef01b0e1c760bd07d0a77963e2c30869d821efc5a9e79629013f1b1faeb75e3a6b3e753b702f617f516356dadb1c89d31a679f79ba4d8e3104518924bd21feb441713f6a43353340ea933c924a85013b1757a823a0dd5541b197cabb4c26d7d97824466bf498cb385be6ae3c6ee9ed37e4218184af90fcc3bf00044b79ce", @ANYRES16=r5, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4010) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xc5e6}, @chandef_params, @chandef_params, @chandef_params]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 18:15:23 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 5) 18:15:23 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x47}, @l2cap_cid_signaling={{0x43}, [@l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0x6, 0x3, 0x6, 0x2}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x6, 0xb}}, @l2cap_info_rsp={{0xb, 0x7, 0x2b}, {0xfe1, 0x7ff, "6ea831ad99088d180e6d3079ce07b9469f15ff2737f24058cf426962005aa5d43f0fc4a7587dc6"}}]}}, 0x4c) 18:15:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000cfb82eed991c8b01b0a557a2480a84d2d91f0a5dc02d509d9baa37a4bc24899cf52efd9595b5818aeaf4420ab9dc125500b541cf16dbbc5d05d4983b7d96d35fb88e1e64c3b8eaa9bc5d300e75b99822631aa1ae6388819e88ca135cebb2e8ee654bca849606c77f39698e323ac93e155c72bab171c70ac8e99448172d3372dd313daa7cf8f6fd899a97ae526d7201726668b38c5e19c43a322c30f4f7c5ee0e348ff94ba5403e9edbab4ca2ff769f484d019740400b32ff8b6a4959e95ade08fe9d282bed99ca19c3a1ea01947d1b7d5717589ccbda294a6c502db92cfdbf55353cf2e778179da6", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100)=0x200, 0x4) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0xa) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x4}, @l2cap_cid_le_signaling={{0x18}, @l2cap_disconn_req={{0x6, 0x4}, {0x958b, 0x800}}}}, 0x9) syz_emit_vhci(&(0x7f0000000ac0)=ANY=[@ANYBLOB="03c800c607ee2137d3f18ed59c136415c927da34358836714ccf22a5a4085faee62caa570499a12a0f4a355469c489988a054cbfc4ea3d8eb63ca8737e494b0e39a7b8aba51ce731c2ef1b4d1442864892111274d62a507d82b7a46d80d16c1d741e730095392d30b55432c736f28d692ded5b890cd100a56bc12189c39edf63805997cc9fd747565903b69effed863c697f10ec27c5ed837e099e88a1e1fcfda5e0b7c4ec7b3db2dacb695a7fec7e4cd1a233c360f4a169e6918fb66c7917d89892d9fae4ed70533c58bedf659070abeba1e17c34ff9f9a9b32ede33ad6484f2a24f3d5c9927b14aafc688b229655dddcb4c1c5f304b8bf7cff1221b82539871f6bfd8434559c4bc949eed3c29dc1a6b0e98c3659566d999f6b430e1d12d91a878b726db46c0748c373a4696f30cfe3c28a39d47e6da8000000000000000000e7046358adfeac39e94512564de939823d7aac207df36d4ebd164f56b8b897e8082a50bc01dc384b1e71f802fb6402c0a17b02cb49963ba95fdf8c4411312dfece73429620bbcdc60874d81338d94ea181f765ea1bf676a811c543da47c7a6a0480e53f9e528f5d50d6436e47ff49b8a4bdec0ca77a684e0b3d89d52cf939a62041790672334bd2b0e4ae193920000000000f393f793b1e19bfe305cb488094faf56718cc97681c1e4427c2e9201ad212430a277e015b39da81424db30812c7bc8ead9c4053175fe9cad1f3e6c41678ad3680ce6bb50590b800ac6470d0c9dd3f92e39eae970c9814fe8c6dd767be8d15a8cc328dc"], 0xca) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/159, 0x9f}], 0x4, &(0x7f0000000440)}, 0x9}], 0x1, 0x40000000, 0x0) [ 597.584105] FAULT_INJECTION: forcing a failure. [ 597.584105] name failslab, interval 1, probability 0, space 0, times 0 [ 597.585196] CPU: 1 UID: 0 PID: 6137 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 597.585215] Tainted: [W]=WARN [ 597.585220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 597.585227] Call Trace: [ 597.585232] [ 597.585236] dump_stack_lvl+0xfa/0x120 [ 597.585265] should_fail_ex+0x4d7/0x5e0 [ 597.585284] ? skb_clone+0x191/0x400 [ 597.585308] should_failslab+0xc2/0x120 [ 597.585324] kmem_cache_alloc_noprof+0x72/0x690 [ 597.585337] ? find_held_lock+0x2b/0x80 [ 597.585360] ? skb_clone+0x191/0x400 [ 597.585386] skb_clone+0x191/0x400 [ 597.585404] packet_rcv+0x607/0x1720 [ 597.585421] ? __pfx_packet_rcv+0x10/0x10 [ 597.585431] __netif_receive_skb_core+0xca7/0x4440 [ 597.585451] ? find_held_lock+0x2b/0x80 [ 597.585467] ? __skb_flow_dissect+0x37c/0x60b0 [ 597.585481] ? lock_release+0xc8/0x290 [ 597.585493] ? lock_is_held_type+0x9e/0x120 [ 597.585510] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.585527] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 597.585546] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 597.585568] ? __pfx___skb_flow_dissect+0x10/0x10 [ 597.585579] ? do_raw_spin_lock+0x123/0x260 [ 597.585595] ? find_held_lock+0x2b/0x80 [ 597.585612] ? __create_object+0x59/0x80 [ 597.585633] ? __lock_acquire+0x694/0x1b70 [ 597.585650] __netif_receive_skb_one_core+0xaf/0x1e0 [ 597.585664] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 597.585679] ? lock_acquire+0x15e/0x2f0 [ 597.585694] ? __build_skb+0x6f/0x90 [ 597.585712] __netif_receive_skb+0x1d/0x170 [ 597.585726] netif_receive_skb+0x122/0x720 [ 597.585740] ? __pfx_netif_receive_skb+0x10/0x10 [ 597.585760] tun_rx_batched.isra.0+0x45c/0x710 [ 597.585781] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 597.585800] ? lock_acquire+0x15e/0x2f0 [ 597.585812] ? tun_get_user+0xf50/0x3970 [ 597.585832] ? __local_bh_enable_ip+0xa1/0x110 [ 597.585847] tun_get_user+0x1b9b/0x3970 [ 597.585874] ? __pfx_tun_get_user+0x10/0x10 [ 597.585894] ? __pfx_perf_trace_lock+0x10/0x10 [ 597.585912] ? lock_acquire+0x15e/0x2f0 [ 597.585924] ? tun_get+0x23/0x2f0 [ 597.585939] ? find_held_lock+0x2b/0x80 [ 597.585955] ? tun_get+0x133/0x2f0 [ 597.585971] ? lock_release+0xc8/0x290 [ 597.585982] ? lock_is_held_type+0x9e/0x120 [ 597.586002] tun_chr_write_iter+0xd9/0x1e0 [ 597.586021] vfs_write+0xbe9/0x1150 [ 597.586035] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 597.586052] ? __fget_files+0x34/0x3b0 [ 597.586064] ? __pfx_vfs_write+0x10/0x10 [ 597.586089] ksys_write+0x121/0x240 [ 597.586100] ? __pfx_ksys_write+0x10/0x10 [ 597.586118] do_syscall_64+0xbf/0x360 [ 597.586131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.586143] RIP: 0033:0x7ff02a5455ff [ 597.586157] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 597.586169] RSP: 002b:00007ff027b08150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 597.586180] RAX: ffffffffffffffda RBX: 00007ff02a6a5f60 RCX: 00007ff02a5455ff [ 597.586188] RDX: 000000000000004e RSI: 0000000020000100 RDI: 00000000000000f0 [ 597.586195] RBP: 00007ff027b081d0 R08: 0000000000000000 R09: 0000000000000000 [ 597.586202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 597.586209] R13: 00007ffd415d0daf R14: 00007ff027b08300 R15: 0000000000022000 [ 597.586227] 18:15:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010320000000000000000500000008000300fc1be26d2e2b547e656a10dec489cd0b79f78e1d8b1dc9e8328995c4b746140d010b994819de4636bff76d1f215fd78b0c728a217c662e59b6ac8451e62e6fce2033ff9ad8606b6000b0d718f5fbcce6aee0fa40bc464c01d8f569e868a229546b647b8c149a129d3bfa00000000", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r6, r0) [ 597.707396] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 597.710874] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 597.736530] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:15:31 executing program 3: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000180)={'trans=unix,', {[{@nodevmap}, {@version_u}, {@debug}, {@aname={'aname', 0x3d, '\x16.#\'%&]((@\\%'}}, {@posixacl}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@access_any}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '\xc8++,\\)${%@\xb6@*[.!\'^@{'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:15:31 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207beed38136a92e39d227f88073b2462aa71b6000000000079192e790269bb550cedb9f3fe54ed32640439e87ec999090273792946a3f88e65ad5ba9fb590acae7bf6696f8a9a607b31c2e"], 0xa) 18:15:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x4000000) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r5, r0) 18:15:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x29, 0x12, &(0x7f0000000100), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@private0}, 0x14) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001140)={0x6, @private=0xa010100, 0x4e20, 0x1, 'lc\x00', 0x10, 0x5129, 0x46}, 0x2c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000011c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000140)={{r0}, "be374de97a3f015f63c062c093f5dbea1b9765ee055ff70d4b8fd98265e73ce7c434cf05cd517669c51a281b10d6fd48116a82ec5b0f8c8d5cb3facff18c7b48e8581f0afb6ed40e2158198b3891c42236f7fb4151f42b1f7ee79494f2a4afc091dfaa52e54a1614e4ed5218305fbc175c0f9e61ba3e05e1cbdb0c88d811a5373f2767010501fbd76ef94d2ea29a2c6732cbf03527304008448b73d7ee7b68a395744bcee8193c3f156a04fa35dcff889e58aa53635992d59d93257d8130d3496f024bceabc2acf0b08615eb65b523bb99d766e7c5e40415360800e1cb3cfe8debcee051ad95ce98a621270de8d9eae55f9b7ea5bfef6d8a6b0f8df3d43d80f6213cba2b9a1abcc6f13d4e959eb38f068401ad2cec7c8e611d62e40ab9c099b451d0d77ce11c8cb1717494591a032e6d0e715a9776a5eccc8f7960d236e58aa54c8f36c22bbb41b1755b5669ae2eb32a53152082cafb5df017fdbecbfb565ef28fd2bfda7dadfd47794fd10282b7abb931e305b6ee3718988cc41ea26286f949003a092c044bc4849da061deeec7475d64d49c0f584649e391585ad23ed93c7b78cb90b97f411f787325a0c195a087f200961309b57a970de5179e978e1c3a5f378d6842fe0be51332a1d699dfdc2221dfe66aa722d8f29f41d5947701da9ac8f5283b0d5ccd9d6ea7323035a47b8c255410d73b7898a9e8f19803792cac8928aaf34e6ccdfd092bbe19675f9cc929d1c6fec1a35b2813b113bf58b742ff8d78d0d53d954bf42456e5c955e05d85fdafdb4385d31542c15701b7a334ba1a3442dc2ac1eec9c13d0f240633b13c54d91bc4994a28c4447ce547c63818b72c4a7262a1ff9bc2cb5ac1b07abd52c1d6407989f4c1c43974bb49d652d236e9bf9f6fed01e8d20764a0ddb3b5df2e785fcf0bb38326653b91d920389770536a6a102fb583de987e2d556b3caae4936403fb7272740de2adab619e5f08ba9366446019d2abe8f954cb8f7bfb3730cef74b33976ed5ef228003edb0ee3f2aafaa8514624947e76fa91daf60998e0337122e41cd93e55e623e9dd6e1f91a0a1fb00d1f219a9fdec055b4d7be52f59338552c3427815547b1c560d3a6bfe396e98f6f1298d311cc6d660818c43829aabd6c65ba275036bd0279500a5a5ee6ab201d5c12e97dbc953369e3db677828c58b0ea40093de5acf81de364ca91fb2fa08efbc4afa577fc4e442810b6d23955cd7cb4733ce730fcdeb17502d7723958477125b8b92496070a2e1c5262dbe6bacec39182dade148985f77f33030561388151302041b9ae94552207c424e7c8e001f811e946345d505a993db1d6d68fb76dfe9c2f58b44314e8b90aaf2daed300a3c4a11fd91fcd761d7306c641b4019d99255f09534d17802f36e44888b51501d1976f2e27836e65640b6f30040b9f36142114ea9ba99249edea35e15490799dc9fbf380020b8ada9943aecc2bcd5f18d2254908b6cb5e99745bdab730548957c76c5b291f27e3db9ee4558a85999cda1ac98062daf508b4419d016beb18d8f1c509caa8166fa55f70dcb12cccc007ca1f13897cdaa862cc79d7fe8620ac2861197d2188d10f81923200d56321e2d7b4d9ed658c003a3b0a419e03ca712417875e2fc100a66d5cf3486e5a21d27e461a066076e5a09d8a3376220b50355368ac5c469ed1ec9b4e4110a969d628a14b4a6b84bcb90f7044471c775ed9ccee8264d38b6293c7e7f06f688ff4cf4c92dc067f3fbea81eb93e4aa693bd04917d01f4851f124fb49b8f7dd3d854764c022c2a38783862298fc157ed46d0c5e3ceb9d86c6450dc11c2fa6074c8905fc7551c12d43e32051d2cba1a7fd5fc968bef305c0846e8827fa42a40c1749aa5c6245734527fbd914db3966ac620cf5b841e89c05b3dadad4c195aeed83b6a6f7b7cc97afcc5dbccc1c06d9154cc2a3d01fc193b4f71e6dbf4e00cddd8cfd528f21ed596fa106e4b06022c5868928251a6b47d839b904907f103a61b31d69ea9606f9ec99933e0efa88226a039e6ac00a9650aaedae0b07023864a72516996c5f22083093b481b4e7764979c9548ba10b851f718c71ff7f9a0306d22f8918a264c0636d9d5f9341bb86dff0a8d74d2679b234daada10b299763332b44215d6c00a02b58355c54f5409633fe49febac895e14e23e125a617ea676e01be11b08b7ac637627d70893a98064e7e3197f77ce0eaa65bfe7855e1b24ea92d78d76ac3e5a8d8cd98157503bdf87244987a5cd135adb2628cbc19de524bc190a763550d3572344ade160284946de6348c91e2ccf0ff51a9376f055ddc84cab06d50398460a6104eb60987a9da753897139b387058d8b769cf355498d72f9edbb3cce2d07fb338e884d1c03240cf9b7f7a8334289c2495153c363dc075f4dd1978ceb0368d0a12f19c2646d8b289652b44a4fefb7622a81ac865cc0ec4df906c9ad6aabec038006d0f62cabf823eb4abeb0fc5bfb4a539d94f99709da7915513768e7a6b4e5e13d440b40f653270066a8d64d760c2372bf11d9f4973bff47b4408e09b1c52aa95f5dc2df0360feeabdfc933ff4c5962ed859a3499c5b8180c440631e4eb450dab0d4ffa62d6cd45335396b4a8b4dbb5c7201f893a704c75f050811dc2c191586f56ea10433b764e6040651570b44a2110bb102424c4a1c413ee801596de4141c17eec1b8f5630a82671aecc1aa14354acd0d32492afa41c1a44af5c4594d39d4bfc91cb0f697311964a3ec0c19b1168503d9c5fab95f4d57d8902302a2bdf68bc45e29af20adc7ccef3663a7281554e9ec7e9ba930627b25743b842f68d1c647b18bbcf4a7d6fe7a416f6c3fcc4290711392614f349d0bd9f67c955fa5cc5ae92d26c8ea86b25cafc58b1e04e85019e0800834cbb129e96172c8026d13682ca68bea59e5330e9086e44999482a7a2721b2266dbac8b3a16c1db68e2d6630cbdd08ae42e75554c9808b51b54575d9d7ae758af5a23fa3a01707775f321a954070efd7c737f7a077f733a4e3ce657a2e07c517b90282da3e4501f5115a0ea7b82838d2c9a5ebdcaef424585779276c9e79dbff641fd41a5dad59f481890ff491b2144e548274fa81660b2bf0b2e7b4286ffd8b9aaa961b435a13dae94cdf70d46b22f549fe44002db090a1ae4fc1a2b3112f3b4e7f8ce8fa62c3b449fbfd328669d54d071646e7b5f4a6adef0b34e66d4cd4b4d106721ad0dc358e3d8937b7862f0950be74633196b3c19ebfd7d96805bc3cf08aa4f1d6003e374276217dc8f1490a527c9256e9b04c25cd07f2248582be4302472ad18107975081b445342e0a2df2b84319b2fc9efc1adeb2ea28a094596202455cb1de7a2ab7f4396bfa6bbb14f280cbfc0566a416cfedc4c54e4e080f82b9cc5e73e6f82c47c1bea58380238d5587e6cc6371c4fc319535062fa4d68071ec2c56017d5d63348766962d78474f5ecba5918ca86d82e6b54f1cc6cb5113b41ce1fb974c49867e2d081ccbfd4b2dce9e8fce61faf157507521e4817181d02c3537863850516c98920b1c33e5cecb0ff0f433e2876b518da085e400227d43671786220088a95a3f9c7248586ebb1d05f165c79db3344580118a474a5e4c89f8cf5b77c3b0897f53e4a15295dff3da0a569fbb42c9a2ef74aae9ae46d2a2edb795fbbcf4c20f2477a9ec60d3eacd343a0ff6ff01cffb4906bcb17087d4af1dc063f777a6bec69568b02e58a68399c1803aeccc0f1e7e3fb5d5f911bc144c4b2d274c8d15eec816dec25ad82d6af493e9ecaeff5d146ddc75e119d91fbaa1e5a3c342bf7014ddd2a2cfb29b46eb71df3eb4c371bacafdd8b4f9ccec700526ccda447de5353cbf750a35f759a2174c30eb7b54d9ac1f437d3b51fb6d96fa051035779102a8a040035c71cf308c3999cab2e5db1352d74475b4f01b2288d26faaba7400c85e3024c5461f3995e891d49191cbaa0b1c81feb486205f6a0c70ceb8a8a0ac0bd2e10d5820796e69b81ec96f7f32bdaf87f1611a110234730548f1130548d61ca44d3c6693ce96d6d0cd3c883aceac4294aab6b5d256b511573127a1f91b167919e2ac20d73445f9380df3a87e8ee86ab94d728824189807b0bc3fc6b21adfeea20f5ca5722c0776dabd5d469d99c9a366d62afde3d6c47f5db02937963117707054abbe6e2a264e0729d8a49de6dd05ac1f00f8b155a9db4beb44d3d17411854024e5b5ccee55c7483b1a194d9640734bd9437f62cf0b35a7ba16defaa7d9c8b0943b8b3efa078efdba775aa81c3404746d9c81988187eed562ca0bb6df4bdc80a03a890d1b8648aac021be6660059d60cbc31b8a852c006139b598ae73c7415766186ce18e4d1b57479e8d47386f0e06d4386dcd525dffdb49eee5a4a6c8e5ffd95df9bc1c1e7858d4140103f98cb8a41f9eba1719b2a6f94e1093afb0f0bccb3e04f642549f0d80025e3d935ed2a42c4e283c42618b80577497ec77ca06bc1b32bcc67cd57b3de7a4864a2d51c622a854eed1506bda4e498d9b14dc9946be6575faa2a7d047985a1ae463479d2019407badb27b2faabe12b637a908956e83b462a479b8dfae506ed5bcd50ece4010a3be549b9bc60001db947637409a23566213f01241bd9738a09c4e00bb99a736dd2e70a17c48c327399f901b2dfacbb42952403f515b2cceda5731f8c07a4106a78e88ff72da08064dc18cfc02e4454ada2040cd4171eece27ad6a9113f34d63509ae353cedcfbd4156c67c404d83b17ae46d794df8c82ea296514a1db8fca2bcd444f02e9c73ea74ab87ece7514c1eae8d8d4e4c950bf9b38ddefb25f49cc1d4ec9f28b26a1beab7e4ecaf6de3f5ab595399648a5a0cb439f20e4072f35798ead7c5ccdc8a1488086d8c79b92f37e6a6fd4bb82afe732ab1b8615c5d388dbdb692c3bdd095cf19ed981bcdd7e5e063a0bfcac84f6b128e2bc065ea637e0f027c136ead89240e76f0c9eac6eefeeacf2100063d6c7933ceabf38db13c10a3d9a2c9d01d3f9062cf4e8c9d3d441d31a279b88eceedb9296da4102443e01faf077c32a4af194fb3668ba1f3b036cd1ff912b8d3445ddc891503167eada92535781141dafa38c5ca786783e7c6548edcc0e079c26124dc65be98e8cb70fe048ecbf854ac87016577b684cf360cb71176c5acc07cd5c2e700fd9677c76e53e8ab222b6abe45f79e55110c4ee669e26269b13736726e40963cd15f30cdc022f4d4d6199dda753ab0390968d8e1698bde82b6967fb7618d9e719a1549ae9db952fac127a0e8ed29c528e3bf92c19c586c445a7196e127e21a85a71a127cf503c410232782428eef68241706753f2d6703e9d1b5a7dfd57ae0d7edf1382e8c9c0b6115546fed1b43291e186785a4db7ad07c8a300273fa9a430ae870fcd2d1b7161fc6a93494b581e7640a98078bb4cd3707eb4da77a3f3d1434b954e66f449d1bce2a34f8018d01bedda7ce4a79f2b74b5a9b995043fe15123855822c64f380ee014992c883d926b10ed85892ea7d4fabc0d0611c57a19db332645cf8eec3135c21e03d954f7402636765daaf46889c973c58c52f77935c168b378be3f8f8a917389ebae56bae5b10537d2725ad0e0ea6a54fba8716276e02dedca0ba22fe2187803e8bda6fe6fd0188e6459d3695ef0570a94eb5ee358235bedc719d8de791f52d184611be9392fd043d8c06c2e9d8f9706976c1e7cde8fb1c5e0915b6b120be9bd4a97b74bc608f68df5b7eb2e7bcd3f20712a0271819b753cfd0c9e101"}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001180)={0x1, 0x0, 0x84}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r4, 0x29, 0x1f, &(0x7f0000000100), 0x4) [ 597.739649] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 606.430548] Bluetooth: hci6: Malformed Event: 0x02 [ 606.433271] Bluetooth: hci6: Malformed Event: 0x02 [ 606.475538] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009980)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x2, @private0, 0x10000000}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000001280)="608fda6cbd5ba8b6154430228e6150f3a7afc3c8b0af1d7883f2201df7a505615a8c3497bdb08535d53eaf8e7a5525", 0x2f}, {&(0x7f00000012c0)="89b9e3663f4d768a1416b132e554e67714a8ef8498512591df590a02231c94e0e02cb16036cc55cd41fba6e9d32f3b24c3e421aea03b46a69bcbd19078239dfe81a0eee8aabc8f24e5819da55340214eefa380c5f660a7f33090a3e6fa483cf7f7a654392a199816abe315648c422dd3787d1aefa4120785f9b70d4729b64f34953d00349db9102c", 0x88}, {&(0x7f0000001380)="f1d0e75aa74544c2f57bb66816952a969fd53f4148d24f6001f49d0bd32d883788a6a8b3de38275001e68668416455248e8c04279a5a6ed2e42b063164a573496bedcfe946f5c3294f6bbc0a59ed7a9902cbbb144a50f18a80419e6f2b7a27dd81c3f179aeebc246fec7722f52558ed631b5038e2a2de087a1a94ce8167d96964b90f560a632ce7a50f1da5a8b25e801a44e77740eae8fe001412bce357f46a29b5153a66ae867612598800971f64bb1fe66b891197413eed01a01345f", 0xbd}, {&(0x7f0000001440)="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", 0x1000}], 0x4, &(0x7f0000009c00)=ANY=[@ANYBLOB="280000000000000029000000390000005e0202000000090000000000000000000000000000000000e66aa094b1bb8becaa3e2e23d3ebc7ffdf9e350128b119f214e119574e2aeabe7db32a1d665a66c19e518823039809d373b7f38fa67b46826ef13b55a00d3187c1c40ec0e7be08b9a86db6022e12b06fe52864b28f57ff3e74fa61590ef772abb42815f9d196e4e5652dd3d88913d2a407ae75a42cd85a828bf0fc8a92ec117ca67f1d1f45288f33f5f9ac4b646d757b1fa1d6ee28b49e0d96f52e66ac125606b4da521b1fcafabf6894621a"], 0x28}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000024c0)="fbce065adda4b534098c07e8f7be4429a53ee702721689f825525a5e37e2931036a9d0b7b61d5026f4361388efd9495ccf97de3ab6e0a1e2f5c66d6e5a999bc05abdf7782c522fccec61951381fc491cd1211e8c29e422a4e2e16339241923c57bb5da4a62231e3a633f58a64bbc0821cc82", 0x72}], 0x1, &(0x7f0000002580)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x62, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim, @hao={0xc9, 0x10, @private1}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim, @pad1, @ra={0x5, 0x2, 0x1}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9c3}}], 0xa0}}, {{&(0x7f0000002640)={0xa, 0x4e23, 0x6, @private2, 0x3}, 0x1c, &(0x7f0000003a80)=[{&(0x7f0000002680)="51f938caf4f5", 0x6}, {&(0x7f00000026c0)="6b9422811ffb6516c2dc23025c20dec706db4891bae93389ad39b777d7bf103216cb3ce8f6e2efd1e24925a711beb6361e48ea74f777d5d97a7477956f209bac3045ffc42629", 0x46}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="4b963088d1bfd119f5cffa337ed028d7c12529a3f37b737f1990606438edc85fda508a60d7d6955ed9c4e3e00a30db955b2ade3e2a895d47972d9e708640a235f46140fdfd8e79a2a690043124496a3244b718863f56303d69db4911ac0de1a50cba15706436b614fdd4aa6f3f48548f446d8fa7d779bdd97b8430b5ec3c778777f9ffed2450ff9a09c4dc6fc709bb7c62574c0293bf22628b124f33cbf3e03afd1b8d3794e029981d5bc7ea5d8b483486d6138003388f887ef462e7e8790ed8cbb6681bee510c4756b19fd21fb7a1519320622376ff8de0cfcfe09d8bfd49d676c25cdc34ee116c45a10110293b2d94cd26", 0xf2}, {&(0x7f0000003840)="6a0d8a76065d1da72930b7558a38ce9fa8f7bfd2ee5d1940459a58b3eb6784a330694cf57a2e2653af35605f684fc4d7d14a325749cde7f55c740ba518b8b5836dba851a54bacbddb893a91dba4b8b2886d2e8148a147868", 0x58}, {&(0x7f00000038c0)="84ead306b02df7b8bc8b2ce0f4ec3cc51d4b74d96901223ae3e5fdd1dfa31f7878cb1f20dc67c10294d318a961d8cca2c34e40ef6c5110824520c72f7fe8640fabafa8cbc0ff42db55e35fa9f73f1698b2021004531b6d291308098992cf2e74a9501da0581a6f5707accb62429f666f7f70fa060acfd6b29bb71fdb680964298deb6e0d3d9651079ba00bfd32d78cc5dc", 0x91}, {&(0x7f0000003980)="bc6faad418aed7ba517a6a14a8eee0c0328558a5e92235674fafec470e5d326599484d87afe46f6e98174d1bb99776b24293cdfd9c702afcdc37d46c56587cc631472806c30fd66f529960b5bb7ec97f93ca49217f1551dc7abb5ed52fd59b27f4b9b25abe95a18065e6f4dea10f1df1789ae9bfe7bd4fbb6c6c8a2427b572a4c58247ec87b7bfabb11cc3fdeb47ee6855dc803bcb434a36bfa702f9c9022cf6f771c59ac777b322d93d6e27cda18d6b78ca99a8afe4914d6f211d5871ebaca55939a1", 0xc3}], 0x7, &(0x7f0000003b00)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x7f, 0x0, [@mcast1, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x0, 0x9, 0x0, [@empty]}}}, @hoplimit={{0x14}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x3c, 0x9, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xba, 0x89, [0x3ff, 0x4, 0x6, 0x0, 0x730, 0xa6]}}, @hao={0xc9, 0x10, @remote}]}}}], 0xf8}}, {{&(0x7f0000003c00)={0xa, 0x4e23, 0xffff, @loopback, 0x5}, 0x1c, &(0x7f0000004000)=[{&(0x7f0000003c40)="89678cb97bf2c6bf27f8d6a4ac626c9c6fd678185afd6ea5378ec380257a17a8502cfbf094f492024429601bb348aa959e4a69daddbd996f5abcae44d68f0007c43e108f3916d52fce3c66b6de125ae77d22653a0cc6399f0fd785992b3f9334b3a71282b7b063b1f7e0ef814291db6de78be1192cb5f14bb2ae33c45d", 0x7d}, {&(0x7f0000003cc0)="b3a24344f15dd250f25e74983a086f2e268fa5c4a4f2517dbe3cbc022ff959b6eced064ddf9de99712c340445b7de27739f2f91dfe83248f4bef72fefbecf37cef3c8bca589892a0", 0x48}, {&(0x7f0000003d40)="2b2207121c8506f12d2d7a7aef08e53ef1f17471dca55fb74dd67f9010b32522cc124e32580663e21728e80574dc6c839bed34624ccf7d044030f0fb5556", 0x3e}, {&(0x7f0000003d80)="3875214042658b597c386170933fa6ad5efddcd6b018c558d98c83c64a20b0f9e8742903ef5e892d562e3ddf89f30dd0894b60f8b158e1df8c2050676cf62dd941b3c6d4731a968c566b5dfe35924c3c2630acba9c39a02fba9f9182c18eedd675a5faf209e27caeaaac69150cb5769002a878cf4c899aff0aa450db0b996c827fc966716ddb57b5e9b7df1a3c79153443eb25322c12d6942cf9cfd2b889800638eea15cb0b6ef3344d60fae31d93bf46735bb509f06948788", 0xb9}, {&(0x7f0000003e40)="37fad3044c6b0d11d56028386fb1d2348984df52ae14688376d5d07a7e88fed3c60c4359a788e8e617d41d79cfac8fbf7de0d63dd6bde56103e373faeaa7b0afc61337f1a60514f328f20adcd38d2d2caf21efd48c3f62752f5f8eb3b8fe1733a67aa7874f0b2f923de14eeccd7ae9a13c4bd1bc8cda0c0d760d806763f4570eac0506d92871f25011827a9445906e2b8b1b317023f431503b00d3127f1c2a84f60c36f89e93cc1c911452fb2d2844c811840f12518d4e4a1e04d211a3", 0xbd}, {&(0x7f0000003f00)="3f6cd029d9ad3e1619b56378bca414aa98bade43117fd02aaf7d6a91ccbee6ae57a330f3479ed2a355924ce25b6699deaa3e23ab46cb235404c339a7e3a788068f205b7e8543a2a2dc801fc13c7ac2006c6bbf30fe32b4c0b318a41a954201c492fe1d195b1d438f131c9a756dd006bc10820e7252013fd5d31e22fc16b843a183be2531bbb9341f54fd01717e0e37fb9e381233dd9a820330b3bc6375662e46b2ed4d12db9e5be87b218dbc2d32", 0xae}, {&(0x7f0000003fc0)="e56b98fcc1e7d4f1f52e256b5e8b9cc65f17e30bbe33137159", 0x19}], 0x7, &(0x7f0000004080)=[@tclass={{0x14, 0x29, 0x43, 0x93}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x16, 0xa, 0x2, 0x1f, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @mcast2]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x84, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x88, 0xa, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6c}, @jumbo={0xc2, 0x4, 0x81}, @ra={0x5, 0x2, 0x800}, @generic={0x0, 0x44, "454609c0fd29bc1c40a3df5624f3596fdcf5c10782ece95a6d9715985140bd2c368171e3534dbd94bb05b15e27fd12ee2b77802a668d56cd9ad8ed3efa64a3219b0bce8d"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts={{0x38, 0x29, 0x36, {0x21, 0x3, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x0, 0x1, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0]}}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@ra]}}}, @hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@pad1]}}}], 0x208}}, {{&(0x7f00000042c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f00000044c0)=[{&(0x7f0000004300)="b4d9f29738b26c95e6922561a948b964d4447a114e611433396b2409a0250ea85e83433ba671512bdaba7f09d29388074b290f951d97eec83ea82665cb678ab672e98fda800738989bd236b61427289044195888dd28aeb328779b7ee9f00feb842ef1ee2fc6b5fbdf7da966259f8bdc310992151f01fbfc008c2e8a0b65142ca48ef03ccf7a37ee87781bffbeca8f539e069d9a4cb723b4e16e9b79ffd824a502eecd0c2d081c4dfd693ccf13834762b2c46a350e5b2cf696d73e38cf0918e75445aac104abcc38dab5a23b9152ac60700972816f160c2cb5e9ab9c196ad336ee58c109dc", 0xe5}, {&(0x7f0000004400)="373bce911560b97c1dcb0c85b6159ca1c7a2ce57a7d5", 0x16}, {&(0x7f0000004440)="f856d21d87fbb6675ae5ffe27c26ae99703c68fd66f91e8334a40000053035856200a8443c812d19a50421cb87fa009d8da9af99", 0x34}, {&(0x7f0000004480)="8af19e8ac805a6f96170d15eff85cb69f9de9c34ef8929", 0x17}], 0x4, &(0x7f0000009d00)=[@dstopts={{0x1020, 0x29, 0x37, {0x5c, 0x201, '\x00', [@generic={0x20, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x7}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x85, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}], 0x1050}}, {{&(0x7f0000005540)={0xa, 0x4e23, 0x8, @loopback, 0x8}, 0x1c, &(0x7f0000006cc0)=[{&(0x7f0000005580)="8fb27c8274299fcad0c3947c3ef96d9f098fcf3cde14f56a9efe5ea0ba95a2d715d4df12d8ce02678586b7ad6d5b9cdd2852cc2b0c3090a253cf2fa20069f06c37b9be8aaf4b26bf17476eeb18cc9981eda7b459d72c41316e99116465dacfc6e676ea6bc991c1f587729636525a4afaf88fdf987498946f620be68d1d4f76abb2e328dde62e9d8e8b21b7fb7584d3b4bd0980e62d2c20469df2baf8bd8bb979206301d954f5652bb5c2d4987d7df1d5361a3e8efb5cc2f693d9625720707976f6da6bef00b74f8e1d6b97f62b3170", 0xcf}, {&(0x7f0000005680)="e3f5aae29b94802b12af811ec44aa06e1d04cf71c1ef56742869f1b719e90796d4651e266d6ace649889f6d272a80baa10d706d7fdbf3c16d1a1f3e34328484371fdcdeae041fdee9d136a590285c31cb24a5879f16d39a7f819565f76bd70b5da20f4f0a3931ea28a10bb9549c832eaae0f5ad4b1db83f6d9afa61d2934db55c03ae5c0dc99336fda6f8eb100481d8ceb1ccf61c50bd1cbd19289c83a2975d5377fd5b5c85689ab6e1a30d13607385e360356ab4eaf9c7c733f3f365adfc2852ada27e4152cae201f0a7bdeb4f3c3ff4e2010a78041f7efd457816204f6c8e3", 0xe0}, {&(0x7f0000005780)="cdd700e0d99c9fb8b70c5bc7e4d8867516a7e82bc8f5f3b699086f23af1a839fb4aea9ad9e9eb7e19b7131a26abb20846290dcf11f2d4ce7fad682f8e601bd76baae7f1a93483cbac8130df57982e55c86526d1ff0c98c1d39575b026a6e07bae934f3e0aba4056b892274d29f3a4c51a23a792d8d58a27f752975ef3d2ef2e1a6bce9c1877f4d967efd0f222121e41953367c241be0714806b388aafbe680e29ce42ad90f9c8d3507ecb9e658d83464858aad5dc8ec1868fc5009d7ecc8ca30c4cb640a306b8b282c9f4ffe54e80f4ed81d4edd4159dc75cdae5e", 0xdb}, {&(0x7f0000005880)="4234e64da17ecb1e74a82fa39198810fda254ea42d731d0c38d6145fa19a7758264d52d8efdb09543a325129ea6cb34f3e5e9dc35e737610eff903b105eba67d4c1f0a8509f4125612432c44ba534c8c00b13d433aca649a133cb54f2f3a2251e94da4a92dcfab18ebd8a174f6e5f9bf56b3dce56442ef2bc5baac9e4a2733077e411e7ce6478148ea", 0x89}, {&(0x7f0000005940)="4d366e596fbf0977525e78a1cf37dc0adf55b594e52fec36bba53f3cdac143bfcae40d41fe63a395125ee9f07005af6805a5f686400b87be05e1bca4d643bbaebe33bbd2ec58df5b2041aab19070792f35fc5855a61f44c6889bfadc56726a821426893721432231040b024ac1eb9fe91005d875dc00f16b3cf067511472be95e0480813e316e5c1d198587bc492d2647fe758bbf59b01e8d89d4e8c9bead65c7c2d86932887125daabaac9bde026c", 0xaf}, {&(0x7f0000005a00)="a33324f327f44c0ae29040c12f0aea6321aad3f86db92185685195499d0b06407e26b3e5c769f25aea6f15f2f0a9122e89436190cde6a11da402994edd973dda59c79b248adcc63edf8ee47dc607652e00ba7c94e907a8af3c74ff830406d3fc50f1f8246eb325f1fc30836ba80dac4a10d61948bfc928dad38c24d598c5b8b0e6cab8b91223b0a6a626ab3918bd5d7e28dce3c65ef4ddf5aa48c20f9b16b129a2c38dd58dd23ccce6b01d1a93ee01d437a5a74859bef316f49d5bcb9be07151", 0xc0}, {&(0x7f0000005ac0)="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", 0x1000}, {&(0x7f0000006ac0)="59884f47b649f3f9a4960c4f2f75a7113376253105d6bd66ebcf72fff40f7787c55e81fec9f36cde5a6cc3cc87cbdd4200fb5470cd004ac9e5d99308cc726f1044f6f3c02a1504c6ab9c15d13a34ec0406a522f13c697e88f5003bb4156df84f92fc6beb8cdcf0bc97ba9231a8a8b93684c9b84c0bb07d2a8cbf396d23bbd334689458095877a4f5433346dfba1ea21bc646ee58caaf450cc1fd1d31c48f7cae5e0b33e32262f78ab428e156dd92afa3549c1fedb76208648a11ba73e6c72e7ed3ec24d345bfc664aa06a324afb872eae7", 0xd1}, {&(0x7f0000006bc0)="4b92196d5982b62aa54b6c20a3400402e4274075a5ca9378c24a205afc5e85538b2d4ca2aaacdea6ecdac23da2336ff350e4bedf7b8d98ad7ee76ab7235c4efc3440f55c21fbe316fbc461b534afa6b80bb3817ede8bf11b9673f10fe8e26ea80413d043a882c19793a03fe0f6fc1a2a6640a258b27c0ec68206843b142c7d463d5586d25f07df1e05f98ba8f754f59c769ff091e578", 0x96}, {&(0x7f0000006c80)="e5fe71", 0x3}], 0xa, &(0x7f0000006d80)=[@rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x2, 0xb0, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x1c8, 0x29, 0x36, {0x2c, 0x35, '\x00', [@enc_lim={0x4, 0x1, 0xf8}, @calipso={0x7, 0x38, {0x0, 0xc, 0x3f, 0x40, [0x2, 0xab8d, 0x1761, 0x0, 0x4, 0x1]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x1b, 0x40, "0e7b42c637bbb97620d30cbe8e2e3d8cbfffad81fc565921b98e73b3962393f7ec08011d15d501f3cd4674cbacb3b76d3ecd42188c45833f44e3bd9140ecde99"}, @generic={0x2, 0xae, "572845284658614bc99eddd7280840fc9b34888f2d98f2247a1f566bbd3ce9269526d8ddc363743490304e2a686b570e94ac0bbe1e1c86fa723405db615777f8d77b6cc3cff59f76ce5fd15e060fe20002b5d3b346d02ad12dde945529ba9dd656b41a9e9c51d6c0ed031108baf55f5c5b42fb16f504a535327e8e530a9436be745352c428f369d06fa514ad0f2a3fe726a25aeb7672b498d04f5c8363999b7f5dd25a66a4e37b469b8b7a052ed8"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x61, "4af200e4e9cfb331e403fb9874f63f59a6f43798306ba88e984c25c327a9dd7ce5a0942489bf3c703d2050376260d86a6953bd50b208c13a84b965b72efedc43ff4987ac26c4ceb6eacfab6487fd9542d105d9257d7caae2cdf877834286ccacec"}]}}}, @hopopts={{0x70, 0x29, 0x36, {0x2e, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x2}, @generic={0xfb, 0xe, "00ddfb39115fa974868d70264c82"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0xb7, 0x5, [0x19, 0x61, 0x5, 0x40000001]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}], 0x2d8}}, {{&(0x7f0000007080)={0xa, 0x4e20, 0x91a, @local, 0x7fffffff}, 0x1c, &(0x7f00000080c0)=[{&(0x7f00000070c0)="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", 0x1000}], 0x1, &(0x7f0000008100)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @dstopts={{0xb8, 0x29, 0x37, {0x21, 0x13, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0xf8, 0x7f, "956eff804ef35d2d697f3848e0e4d51684f8306ec3825c807ac377a09cb679024b514bb87cbb2912e377d3148fc5516b039cc4bac8763acc9e337755c3b83acc74d62cc05c5f0e45956517cab848db1b6251ef6814ce4895a455ae34781d7d01b0a79dfdb2b6f4519741a84974888db592d90f7827ef72dda9753c6d81f76a"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0xf8}}, {{&(0x7f0000008200)={0xa, 0x4e22, 0x4ca, @loopback, 0xffffffff}, 0x1c, &(0x7f00000093c0)=[{&(0x7f0000008240)="ac09d296ccedc2a33eb60bb17fcadf24db3a8d7d968277e77af7660023a7b4b6dac7c4cc7c9d57a1a4853a3a832142ac4c332072de1392623c3e8ff2be8e4b4b308a1c8edc8e32cbb2714c488064ff037ad287b0183b89b05f0241e025a2b00a65bb1a268758709a01429d557ccb70d4dfda2ec6d1a3daa2eaeaf08203e04d34af67522aa386559968c8df08f01a8525dacb456bbaa8445b77ef3976e6657d0c375f1adcc6052f58dac4c7fda9135dd9ad65b12988a436d8feacfcbc8a5f056cb8534e1767db0792abadcc92422c90c2ac247bff65624843dc6f813cc4a31dc250a0fc4a13b51649c2df701916ec856de66d34b8936f10", 0xf7}, {&(0x7f0000008340)="0b512932a116d312c4ddcf59e10643846e5cb5d78a5c11aef75bd0f26c9ea84cfbac6d5493f9186854eab07987f115dc27f2", 0x32}, {&(0x7f0000008380)="c1a87f62128c5ca63225391f95bbbd0386ca784372ad6be7d8ea95dc79", 0x1d}, {&(0x7f00000083c0)="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", 0x1000}], 0x4}}, {{&(0x7f0000009400)={0xa, 0x4e24, 0x10001, @loopback, 0x6}, 0x1c, &(0x7f00000095c0)=[{&(0x7f0000009440)="490712aa0c2f4d61bfbd73a7afc23d1528dedbbc1065e9f3c678577bc5e9f5a933a690a9e5003f4cc0ba68a4ee9b01", 0x2f}, {&(0x7f0000009480)="305980b902db10ac81d2e5ee4150c66a031a9b87d8d0a019f36edf4757b92e2ddfeaad1c2a272aceb8066d8fdefe1089d311b7eb7785b153d1f82215524ef039cb08a398519978841aca5d0cf50bf4d878d386026b97676f04f5920d43f75417a0574a20f4080c01dd475c81e05780db1d8e0c871c15b2ac63", 0x79}, {&(0x7f0000009500)="dbdc300ec7ab86f1d09697401480529d984dce5adecc", 0x16}, {&(0x7f0000009540)="478f29a4113f47a81c8e32d0c7f7934c42cb4770e5e4120e58a59879a7a9e4165d9f1ecbcb463ae911c5e17e0879e3688addbbd53b1faa", 0x37}, {&(0x7f0000009580)="16571a2086d535786ed4c07fdbda54fb488a62dea559b1a0e5f1146f", 0x1c}], 0x5, &(0x7f0000009640)=[@dontfrag={{0x14, 0x29, 0x3e, 0x42}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x32, 0x6, '\x00', [@ra={0x5, 0x2, 0x20}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x18, {0x1, 0x4, 0x20, 0x1, [0x3, 0x2494]}}, @enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x80}}, {{&(0x7f00000096c0)={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8f1}, 0x1c, &(0x7f0000009840)=[{&(0x7f0000009700)="3e9815df411f1c3bc3448f2d2a686f026769260af6599df777901e6e187714032190e41eeb0959816d95edb6accaed6b5d4701ada1abaabb78f393990aa8b5de28a86233187a672ed072942c67a667f8301606e83df74956c8e9d843e51b9926cdfa13467efc041b05984030d6bd13cf3bcefb0c5dec53e85b09d1dd09bb73b926802a82cca1e49ef9bbb09eac334612c48679eed46960c1d269bbedc7072c336311de6ac15fe0c2deeffebb771da588fa6d027cc2d35a05e23210caa0f1872667d876fab37fe6dcd3f95198b5d5aab0a0af1f07f4", 0xd5}, {&(0x7f0000009800)="828c525d4499d52a3a36c04ef42b1bdda28f097ea49496280929bcd72f82ec9ca64376d3fbfabbbe0278580dd0fbf5fc952a88b1a0ce5f91", 0x38}], 0x2, &(0x7f0000009880)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x5e, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x87, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0xd2}, @calipso={0x7, 0x58, {0x2, 0x14, 0x1, 0x2, [0x401, 0x4, 0x7af, 0x4, 0x8, 0xff, 0x7, 0x84, 0x8, 0x0]}}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}], 0xe0}}], 0xa, 0x881) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000001200)) setsockopt$sock_int(r5, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYRESHEX=r4, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES16=r2], 0xc) 18:15:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="fcfe5c8142b602df6e8176ecf6988b62c856f6d8a4e3bb7039476e449c71a7b707db0f549fbdc457668cf81eaed09c97f05eda9418caa943917034e69d6cb568ff1940b0dd38ee549be37d74c5209884c006c5e2"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:15:31 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 6) 18:15:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r3, 0x11, 0x68, 0x0, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r7, r0) 18:15:32 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_disconn_req={{0x6, 0x46, 0x4}, {0x1ff, 0x2}}, @l2cap_conf_req={{0x4, 0x1, 0xb}, {0x8, 0x1ff, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_req={{0xe, 0x80, 0x3}, {0x7, 0x5}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x3f, 0x4}}]}}, 0x2f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x81, 0x2}, {0x1000}}, @l2cap_move_chan_cfm={{0x10, 0x81, 0x4}, {0xc1d, 0x1}}, @l2cap_disconn_rsp={{0x7, 0xc6, 0x4}, {0x80, 0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xdf, 0x2}, {0x98}}]}}, 0x25) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0xff01}}}}, 0xf) 18:15:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:32 executing program 7: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4, 0x3}}}, 0xa) ioctl$FICLONE(r0, 0x40049409, r0) syz_open_procfs(0xffffffffffffffff, 0x0) 18:15:32 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) (fail_nth: 7) 18:15:32 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c97047004300010003000800d800aaf90000ff0f0a0902007609bd30db8aac2d06d9130ccaa81f91dd06040400030006001000040081007f00014002002e000c09050009000700400d02080004000080040008000abe0200ff07afb5f203e8256b929d84e0dca9ecc7901371a983b9fe92fda9819d99172fb3ae688a793cc277c3ef39a30720a5b3af532d2a9b26fc25cea5ac12b852c204bc98edc19ed6a0ccd64d084d5c9ccd15621d4d5f730205f4a269cd4663d68891929368329c1e3f44b3764938dc7c28bfcb407458e485caaafa7f6d1ff27763db6c454f3800860aa6c596c5261944bbb4db3adb158c0d7a91c160e8e5eea00a7050b271e55b52bc2be37e7a42399264f755baad231c1f644ab98a21db"], 0x4c) 18:15:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x460, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2edc}, @WGDEVICE_A_PEERS={0x42c, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "895f0ba1c78a238e7a83873fcea809ad3860a90cfb01c29335afd959e55b8256"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x674}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}]}, {0x2f0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3be27c5c1f5222f321425cb3c4c3c8b7ed6e05b9666e560e4ac8359eb78cf887"}, @WGPEER_A_ALLOWEDIPS={0x278, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10000}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "edbe6713d0c0f9a6716a26a83085d110c26b834a25b138489f66fbbec18e9d84"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0xe1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x460}, 0x1, 0x0, 0x0, 0x40841}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xc8, r1, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b3}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x69c}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x3f}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x9c}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9d00}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x73}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fff}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1f}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x5a}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40012}, 0x8000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x400081, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r3) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1b0, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x94) r9 = open(&(0x7f0000000bc0)='./file0\x00', 0x848002, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004014}, 0x400c850) r10 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r10, r0) [ 606.612086] FAULT_INJECTION: forcing a failure. [ 606.612086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.613080] CPU: 1 UID: 0 PID: 6193 Comm: syz-executor.1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 606.613099] Tainted: [W]=WARN [ 606.613103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 606.613110] Call Trace: [ 606.613115] [ 606.613119] dump_stack_lvl+0xfa/0x120 [ 606.613144] should_fail_ex+0x4d7/0x5e0 [ 606.613167] _copy_to_user+0x32/0xd0 [ 606.613184] simple_read_from_buffer+0xe0/0x180 [ 606.613206] proc_fail_nth_read+0x18a/0x240 [ 606.613221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.613234] ? security_file_permission+0x22/0x90 [ 606.613254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.613267] vfs_read+0x1eb/0xc70 [ 606.613284] ? __pfx_vfs_read+0x10/0x10 [ 606.613297] ? lock_release+0xc8/0x290 18:15:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 606.613315] ? __fget_files+0x20d/0x3b0 [ 606.613333] ksys_read+0x121/0x240 [ 606.613345] ? __pfx_ksys_read+0x10/0x10 [ 606.613363] do_syscall_64+0xbf/0x360 [ 606.613376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.613389] RIP: 0033:0x7ff02a54569c [ 606.613398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 606.613410] RSP: 002b:00007ff027b08170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.613432] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 00007ff02a54569c [ 606.613440] RDX: 000000000000000f RSI: 00007ff027b081e0 RDI: 0000000000000003 [ 606.613447] RBP: 00007ff027b081d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.613454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.613460] R13: 00007ffd415d0daf R14: 00007ff027b08300 R15: 0000000000022000 [ 606.613478] [ 606.614583] Bluetooth: hci6: Malformed Event: 0x02 18:15:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="3ce2e832b6d2826b7d7bab1791b1c71693bc23696fd31d7fce3202f02d5c11e059279db7c458ab105d13bd6f2cf0339a6bb29b21c6243372e816272bc1ad5024436cb68bdc1239dbe36e73b354e08b8c392db5872879ffa3ec6d5d6e53bd9180b47a74da272c773c21a30545b1ecc6d582214ea50d808e267c39e9aa3df1e1a6b3a8b180b6da55dd307064c7c7a2993fd49921b0c1e93bde8ba8606b053dcba655adb5385f3ecfd89d9eeb2211efdc0dd704b764c41e8b7c45542d398bdb9b52b4d2a8616a3ea0749324628b3ed5e4585cff70860fd19f1e"], 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:15:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 606.676668] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 606.679994] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 606.683386] Bluetooth: Unexpected continuation frame (len 10) [ 606.700083] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 606.707641] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 606.709906] Bluetooth: Unexpected continuation frame (len 10) 18:15:32 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:15:32 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) [ 606.746548] Bluetooth: hci6: Malformed Event: 0x02 [ 606.751412] Bluetooth: hci6: Malformed Event: 0x02 18:15:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x16}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x4008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:15:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:15:43 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4f}, @l2cap_cid_signaling={{0x4b}, [@l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x7, 0x4, 0x2}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x3, 0xfc01, 0x4, 0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x70, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x1000, 0xd0a}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x4, 0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x4}}, @l2cap_conf_req={{0x4, 0x80, 0x4}, {0x7fff, 0x6}}, @l2cap_info_req={{0xa, 0x9f, 0x2}, {0x40}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0xfff, 0x6}}]}}, 0x54) 18:15:43 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x2b, 0xc8, {0xff, 0x7f0, 0x3ff, 0x81, 0xffff048d}}}}, 0x17) 18:15:43 executing program 4: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r1, 0x100, 0x0, 0x2, {{0x5}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c891}, 0x4000000) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0x53, 0x9, 0x8, 0x0, 0x1, 0x40002, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x200, 0x1, 0x3, 0x2, 0x81, 0x6, 0x2, 0x0, 0x3, 0x0, 0x7f}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r3 = signalfd(r2, &(0x7f0000000240)={[0x45]}, 0x8) dup2(r3, r0) 18:15:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:43 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207b4b60000000000b5a35ae29f5fca694e9b1becdd69c99aaa97111a8e67aa1c0ffc793a56bbe7c31c7e"], 0xa) gettid() r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) syz_open_procfs(r0, 0x0) 18:15:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:43 executing program 1: syz_emit_ethernet(0xd, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:15:43 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc8}}}, 0x6) [ 617.878485] Bluetooth: hci6: Malformed Event: 0x02 [ 617.888346] Bluetooth: hci6: Malformed Event: 0x02 18:15:43 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04325f00aaaa9eaa00000900913e28877dc88551f9deb6425b0b1839738da38ed48cc98b3b04577965f72fbe4a96bc6a3e320875828596f856268e1e0ebce002438dd6"], 0xc) 18:15:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:43 executing program 7: syz_open_procfs(0xffffffffffffffff, 0x0) 18:15:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="ad8a99d504be3bf9205ce363d6faa53d4d5dbfc3acd058db732781f61429b8d07e726fa33b85bd5d549f179d8b03eaa1c5bd24c63eab9c4f81d40d707d8df17a2d7fcfa87f79ba22a705a091400e83ea71f4ca329aacab8172e8c9a37fcd2f"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) dup2(r3, r0) 18:15:43 executing program 1: syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:15:51 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:15:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r9 = gettid() rt_sigqueueinfo(r9, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) dup2(r3, r0) 18:15:51 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:15:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000a3", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1200000005002a11061ed084fad32d5e000100000005003300020000000800320004000039e5373a654814b02194435a00"/58], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x24000001) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000099c0), 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000009b00)={&(0x7f0000009a00), 0xc, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x24, r8, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x140088c4}, 0x44005) r9 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) signalfd(r0, &(0x7f0000000380)={[0x977]}, 0x8) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048004}, 0xc4c1368863e6cd02) dup2(r9, r0) 18:15:51 executing program 7: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x36}}, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6c}, "82b8e20b9fcbdc78e0a072446498bfd8f5a65374cd61a1910d48d90cd1963dad2a32669407c6222482b8fcf6707762c914276f946806554fd9cd44e97968e9321f41714b41dada0d03c15f66f11f18ec6416f3086e19a2f3dc27e7bb8ec41bfd185cce2ec391f62539b5faed"}, 0x70) 18:15:51 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80811501, &(0x7f0000000240)) fcntl$getown(r0, 0x9) r1 = accept4(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x148, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x48040) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:15:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:51 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:15:51 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x6, [@multicast2, @local, @broadcast, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}]}, 0x28) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4, 0x2}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:15:51 executing program 3: syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xe0, 0xa7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x4a, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x6d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x5, 0x4}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x9, 0x20, 0x20, 0x42}, 0xfffffffffffffeec, &(0x7f00000002c0)={0x5, 0xf, 0x155, 0x4, [@generic={0xb3, 0x10, 0x2, "36dfc9f500eca5582afccbe901e707eaaac2163940ba32a1d47bdb43ba86bef354207eb68bf2890f1e8bc48d0e9d59abcca66b9733589f6a01a6685c693a9fc533e4c7e1d472757e36519924b07ead8a5b20ee2347ef47e24d6900da6501fecb668104b2602bb7d15d24b52f51c8a6475b8423014bc973113e97841e4574f93994de18919f3d2134b90ee84611ba14186aa01eca905fbc59a289176f2849c121dfe1c938a65c548fb5f2971e15000b93"}, @ptm_cap, @generic={0x93, 0x10, 0x1, "a5e86b22567fb0aa01e2e671c3758cc34e100d80b41ae4136e665304d3b052f74d897997b8f78eac88f927735fd4e8654f3da77fe341e1c5565339e829b5335986bed0d33f0be76bac635d0d07916ad4fdf62d6b97b903f77d09a1aa59ed84f6d18abd922ce8ae750cafb8ffdcd08baeb57cbedcfd8572d6f210ca8177f3a4b5c98714601f7db7330f427ae5599fd50c"}, @ptm_cap={0x3}]}, 0x1, [{0x0, &(0x7f0000000140)=@lang_id={0x0, 0x3, 0x826}}, {0x0, &(0x7f0000000440)=@string={0x0, 0x3, "9c0977a1024a30525d243b09d63015454aacf815c3ffdea76671c46fc3f567b7c4d98295d4d3d0e604decfac369933595fb35b3e83b6dc704224f2c155dae414e1c8c871042393310a518976311dabac3495531f533c711efbd3b92279211fbf727e92206c231985f124a9738034243c4145a8300ae82fe26bfc7ff3eb6d48a12a6cb615a24d675eda633ac900468ec644a0d5830b1495cd053e3773a374ea9dbfb2dfba9dd88fd4991247b20162829e9e6454ea6aadeaa7d805c0b42cd98b3d7223ef1143cd606610866873e2cd532c7ebd5893"}}, {0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0xf8ff}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x2809}}, {0x0, &(0x7f0000000540)=@string={0x0, 0x3, "47fe7e8198c04ca7601ba07bf0293020dc3b3b91d860a96e108f24b64b2dc8fda7dfd1c378b5e43bfb22c84775425518be09879916ddc27f1a47a225805ab8e19ee47b66191ce3ebae9564402800bb7f5b118d87ac136abf07142f191a803b4e473435bc43ccce89caab4fdcd123a14b641994035c8bbd80b933ff30b3832bc7f37ec300a2d1935ee7fdca1c04b1cef43c28807a86d2c01388b621596041c7f8d86ce9244b166a138a2c53beff4c0f7e971b1e6d6ad5c1690aff26947760"}}, {0x0, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x1c09}}]}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, '\'\fE'}}}, 0xd) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9d}, "91b188ac783632632b246223a19c9b9fed4e8a5876b0552f365406e4be565fd29aa543ecf6d25f2b3cb97107afd66bdd45d18093c8f293d758d1c6a58f9ab4850749b17c795dc6926e91b5214a38ceb6cde7c8373e8d1d1b3ffbab236c896955231e506566dc28cbd05a9e2f47aeb91b8e48f9cc7868026e85b003afefd579ba306ec1c5768e5c31beaaa517e178a03662c4ccd1c4c0ec4a6e6a92414d"}, 0xa1) syz_emit_vhci(&(0x7f0000000740)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb1}, "48c22f912a9139b8ed87f60989573869939eefd597d3d30bd5b714ba2c1fc6e4f4a40f3cb10a1dca2e3eff2f2b4cdb539d57e1927d19cf21924f8a1682f6fe5d1e79d1e97f30e83db3aae2a280712ebdeebc5c7eef701f1540eb1b423e4930a339a9dcdf80fdae079f64a47a045691183844e903fec8b2c52177f6e3f67bf5dc68ca6bf59f9fe37a6099474ac8fc6b51c14caffab1dee4c746c9541575f7351a90fa479e2cdf4f7230a53751cfe1b5a433"}, 0xb5) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x46, 0x4}, {0x1, 0x8}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:15:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0xc) 18:15:51 executing program 1: syz_emit_ethernet(0xfffffdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:15:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x99000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:15:51 executing program 2: r0 = getpid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) setpriority(0x0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r3, 0x301, 0xffeffffe, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0c0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r5, r2) [ 626.056684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.063318] Bluetooth: hci6: Malformed Event: 0x02 [ 626.071561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.090363] Bluetooth: hci3: connection err: -111 [ 626.092521] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 626.094910] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 626.123374] Bluetooth: hci6: Malformed Event: 0x02 [ 626.599959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.601287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.604499] Bluetooth: hci3: connection err: -111 [ 626.606440] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 626.606578] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:16:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf3, 0x63}}}}}, 0x28}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1, &(0x7f00000002c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/61, 0x3d}], 0x7, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/54, 0x36}, {&(0x7f00000008c0)=""/23, 0x17}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f00000009c0)=""/181, 0xb5}], 0x4, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/217, 0xd9}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x4, 0x102, &(0x7f0000000e80)={0x77359400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xc4, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x1}, {0x40, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x3}, {0xb7, 0x5}, {0x20, 0x1}, {0x3f, 0x6}, {0xa2, 0x2}, {0x40, 0x2}, {0x81, 0x1}, {0x7f, 0x7}, {0xa5, 0x3}, {0x4, 0x4}, {0xfc, 0x10}, {0x0, 0x4}, {0x4, 0x7}], "f8842ea466581fa9"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x8, 0x2}, {0x6, 0x1}], "4084f48141848af2"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6, 0x6}, {0x7, 0x3}, {0x3, 0x2}, {0xea}, {0x3, 0x6}, {0x0, 0x6}, {0xff}, {0x4, 0x4}, {0x52, 0x2}, {0x15, 0x1}, {0xae, 0x1}, {0xa1}, {0xf9, 0x2}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x1f, 0x5}, {0x8, 0x2}, {0x0, 0x6}, {0x69, 0x7}], "b13505ec65f3fd34"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x3}, {0x40, 0x1}, {0x20}, {0x4, 0x5}, {0x20, 0x5}, {0x3, 0x2}], "e102cd2f5301bd1e"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff, 0x4}, {0xfc, 0x3}, {0x1, 0x7}], "8ab0f0ece009726c"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r7, r0) 18:16:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:01 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9, 0x81}}}, 0xc) 18:16:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:01 executing program 1: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0xf, &(0x7f0000000100), 0x3) fcntl$setsig(r0, 0xa, 0x3d) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf2}, "33f32c0c8740cd52c86f679ad646774e10284f16e6cba32ae0feaadb0caafd564fee05a0cf3acace2ca6693409a49d943c76d0866a8d5a89c2947c1a3409f7383948f7f0ea4ecfd7c81de873c875b41e07a4d9f538ed9caabb9eab55f3e4609281ca7e793434f6fd0f244b8af83f5287710bcdb8f5f82b306f7b83dde1326324eedb48963b29fe8dd1fcfcb172afab3e567c7500676ff8daf36d2b732b99a090c6bedc55c70052fd99eaa4d75869972ceb7a0f8e8f82e4d63790f88196e4d1328c4cb84c007b1c70df2ba0092330143be25a47f9f4cabb8a27b62ef51daa4fae63cc5d0070ffd40e3f97d850b48cc7a96209"}, 0xf6) 18:16:01 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="14c900b3caab55084b0e47c4161ec035abb962b2f32ca6e64a81ca1659cfb3b91d3f926f0392b0f1540200000032e2ab7c535b720a52aa25bb7f2638606f9df785820f3b8a51cc7796856802790d7d0bb544530528a7e73061bc5c9c8fb28b67426b1edc9178795431063b1e4772379933d352c6368a8e01ef0b5e5063597c702f9d37d8b4a84debb43baa4340be89fb70e9bffe8939bd65be16b891006531cfc960ea621911be33fdfea783d96062a618201cb360f4f0"], 0xb7) r1 = gettid() syz_open_procfs(r1, 0x0) 18:16:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x2) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x0, 0x5, 0x0, {0x101, 0x7, 0x0, 0x7}, 0x800, 0x101, 0x20}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4048041) r9 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r9, r0) [ 635.503444] Bluetooth: hci6: Malformed Event: 0x02 [ 635.512383] Bluetooth: hci6: Malformed Event: 0x02 18:16:01 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prctl$PR_GET_TSC(0x15, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(r0, &(0x7f0000000000)={[0x1004]}, 0x8) dup2(r3, r0) 18:16:11 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:16:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:11 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 18:16:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040206b4961f57690020"], 0xa) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5, 0xc8, 0xff}}}, 0x7) 18:16:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000001d7d7fd88db7e20", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="5d930c0000b95a70e1ea212d4d8b16f0a11754a51100000000007a1021ad8f09e7307be730db85830defffe1b725a26ae85935f0316dc61cb10667168f51bb602d00000000"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$inet(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="7b503f2cfdadb94203b2a139b86dd8c5c41e74a7a25a8f40fa3b337103bd1fbbccc093eab5e004cbf0c72afd4c282aeb21be57fba28cd7793d3badf14e6a9c345b283bfca2305a98cd8a857e755e468b102e95534a4d754dfbd7fe7cab48595318e69c723ea5c0e6c0940289fa2ad4cf04b0f3149de78423312d53133899635cb94873cc3dd6f6e86ff984f7eb946b0d99ac8ac1fb5c4563464f6ee51043ccbe3b2b38cc75f32e88e9b23cadf24c710b55965f64d135c9d6893f3af738e16beeeab0971098ea38e82b571f1058a478f7f788e1263231f9f5c6af83447543698c38582938fd749aa492dbd952547dae673141a721", 0xf4}, {&(0x7f00000004c0)="4d8f682fe7717a08ac19b61bfa2ab9cf36bc42ef32d00bf8416f06ce4252eeb5b5013ecc789f12e8e8e772ae7e8ed2d67770d6c0b77ff2bd0173f162fed30e16f5fc5e8d47ae528f407b737ab8292d8cea05981dab62f3e80fda0d2d7c08230e65bbb3615d7bfe3ac4acebf3494c72e094b6b1c5308f4273a6d093b9452a96b99118978b93ab46d8baa71d94395472cb750e82df147108a8ce9cf82a6dc5f4cf436a56632b297a12c909369d61015a9716ff9c4ee8a59d1c33f10d1aaa3d3a55b279c00bff29ba30087ee2ae8c44549f7210be1d363293d8cf8ff3647167501e260ab4853ec2", 0xe6}, {&(0x7f00000005c0)="dae67f7c6dffdacc4a4ea86fc73498b8286fb480ecb63ee0e2275b5f81fadfa38ea847db707050d8f5598fd0c79454b6b61d8141b261597e44d9da3b915ff635c0156658495f0908db75cd33f6410cb170df0dbfef6b83c64c95dcb24e", 0x5d}, {&(0x7f0000000640)="55ef4b9728dfe66d1b1939357be2b2a0256e9b93a736da5fc55e7ce13f24e7635f19392a2ac16512175ded19ca54c4ffe3219295a4dcb3dbcfea23c8eeaffe4066647e6f262f61a9584294d8bbd532f979fe1936c62beb09b0bc732d7f0e3d03f6d7f5cc9e208c9ccdf0d4d98a6f0622f79e8ae7ae77a892eefd19f930fff035198e805950fe2116477c49062afe8935b872f64c74c877d09f63d255d095f0911702c0a1485e398d208eac71d22d8e4a0965a77bd8b262211bb934b8b294f2d3e3603b2a741a3f28931ed44eabf3063439ee0c19103a46da183051c8b132823e664e2d1a2ceb4a", 0xe7}, {&(0x7f0000000740)="ea33e00a56edbda13c98894354cfb75fba42775fce44099a170a348a1016a125e8302ffd5eb329fd1028f70e2c76d54a01abb0838fcb564169c54c766c96a1b5904dec3765566a2e5c8b19e0776651e3d58d2cb23cac7191a021687a5323b18fa1a2bbab", 0x64}], 0x5, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x3f}}}}], 0x20}, 0x4080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'xfrm0\x00'}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d$\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd7000fbdbdf254100000008000300", @ANYRES32=r2, @ANYBLOB="0800220180020000080022010b000000080026006c09000008002600ad160000080022019a020000050018011b00000008002201d30300000800a1000200000008002600f4150000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x2000011) dup2(r3, r0) 18:16:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 645.705717] Bluetooth: hci6: Malformed Event: 0x02 [ 645.713813] Bluetooth: hci6: Malformed Event: 0x02 18:16:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0x321b8000) 18:16:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xab000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@access_any}], [{@audit}, {@appraise}, {@fsname={'fsname', 0x3d, '-'}}, {@appraise}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '#(/%{[@\xc6{'}}]}}) syz_open_procfs(0xffffffffffffffff, 0x0) 18:16:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x29, 0x1f, &(0x7f0000000100), 0x4) fcntl$notify(r4, 0x402, 0x0) 18:16:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "9ce680c7d5ba710dd171e9f0a86e7c6792221d2769bd58e01ef7c0ef43667c6f0ee448558e02f90a8097596ed782a37ca47cce59e922561d4d31e00f5d2c05036afb3454c07ee2e5ebe045efeb1fc24a9a0a85118af06d539b4a6c461b39e308aaa3959294e28032bec6615addac39216a5eea9bf65a20fbf783d10ce0c997eed5a90856"}, 0x88) 18:16:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="001d0239", @ANYRES16=r4, @ANYBLOB="100028bd7000fddbdf250d0000000500170006000000050019000200000006000800a1aa0000050019000600000005001d0003000000050017000900000006000a000300000005001d001500000006000a000200000005001900c5000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000e373823641827aaf07b64f0fc9a238e81357e9f0b5177c0790106fc7cc578df7e6e690184cd831d627aad1", @ANYRES16=r7, @ANYBLOB="0100000000000000010000000800010001000000", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r9, 0x800, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x40001) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x90, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xb0d}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000005}, 0x40008d0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000013000000b0505153354467604f7d9f0535d67975606e845bfa974645f8c5a2e87721982426124b10917ced8072a42f05eea0106ec67b7037401d771318a86ca23e175f0a3903dda96dc047d18bd16197bd6aac2dc72bb2b629a8f0132e8178ad942810dd3d51885de88386ac4592ae6bf965a15268c53f320059948de27256484f0dbca3fd07"], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:16:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x20, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r8, 0x5323, 0x0) sendmsg$AUDIT_TTY_SET(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x8, 0x70bd2b, 0x25dfdbf8, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4c084) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) 18:16:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0xc000) dup2(r3, r0) 18:16:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000009000000000000296a2297a57ab28d8760f38a8c63a90000"], 0xc) 18:16:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0404000300000000000000e5000000000000865ccd21a6ae2bb0f900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 18:16:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @broadcast}, 0x3, 0x0, 0x2, 0x3}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000100)="9e", 0x1}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="fedb1cf387841dbe260a9092debfcb5ed04dda40946fe5e891c3000a1a59cd69e8f77761318e2f278fc8eb7b1b5529262b4ab5e8844e34a66f60560b205fb97686420735a7bbae2aa94ca6274c0b452d10f9debe6b5b60516d187d081e2f602891fa6d8ad2cc7595aba07ea7", 0x6c}, {&(0x7f0000000140)="6ea7431a42c5e3eb7747498fd88593cd0671948b314c8ab7f111e5a4ac38ad066f6bce8638ced16d375b19", 0x2b}, {&(0x7f0000001340)="ba69e6e675be2a4e7bfac504230ee14904772a555be0232e04c98e56f0c9ce2964a4c096d4abe1ecdad59d9aaa9724448cb120f78a5727b4acb5ff4820abd49c37b5a42149c62cbfe19e7853e9551ebdde5cb97ec49e4858dfa79bb38713cb3a1e23cb457b0065dcc18bd160f41664b7cdebe756c79cca12d81b062ff662922673a6a3eab59e56700ef78c3ee45acfc9931f43fa983854a11f06a7bc0bd2c766caab566289555984e819", 0xaa}], 0x5, &(0x7f0000001480)=[{0x90, 0x117, 0xecc, "c0807169cb796a32066c8509d919e583ddf8b813f1e4c4970cb3b18375630ba42f2f40669f3318f3d26bcdb0cbd05bbb2919fcd86b32bcd979b0906cf4b2739a5e2e542e685793b0ae38381b45ec50b4df34968847a9a103b26f15a5b8f7273f5d6c832ba0461edd93328162f7a0041d38be9e279cba47f318"}, {0x1010, 0x29, 0x8, "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"}, {0x40, 0x102, 0x5, "d57ff88fae16ecc99876c270980ff8f37951bcc583e00382f3659efb3fb12fdb480192ed5087891aebb2ef8a88ba5a"}, {0xd8, 0x104, 0xfffffffc, "fee2e97bdcbd1b43a619c7db3782f6c6ce770d7973eb7c0a59bb5b17426b439d5f134def2a6d5d500c6a000471dcac0055a4bc32596a851472eec84cd941eb2ef19088918a7d31d432e5e3869b4c4a58d0b38cb2ee84e831bacb802891c59de7ec34608b1efab584acf466c3a9d45939a1ef6e3f016c6f4c3e3b1df5e4db6900bbf37ca4e29e0d1560c475c0875e244eac563d8b3235ed094fce12dee20848575545f76b2bc23e2b29de73ede2229a1c4d7e3be8d12ff8e2b8f4f24b6c88b09f953ca549e6590252"}, {0x78, 0x3b0, 0xfffffffe, "e168d833b770dedbb2d26c0da36203fd1b4846472adea06fd8ded803df5f3ec8d0be406fdfd319f79f71c7e7aadb847a3b33c24d1f75e606fea592a297f389a7ac3dcdaa8abaff07a1f9f717779a15ee6f0c2bad044b40ab1fca5c321f20ce4637c05a19"}, {0xc8, 0x1, 0xd34d, "d0cebc1ad1056fcd6c715401e6f4746e2239e26b19f000c0a87ca3238ed502ec71365d6d5e12ac9b41cd26c2cd5ecf77deacde37d3c0b4adf54a3d6a57395ce908cf038ae5a667824f4b31cd3ea6c00487ee99009375b65d3c994557f655e2be6a627177e30c41f56f77113d6059dc46118e544282bf6ebd4370765624971495a10b7345524d76b82874661dee1bac7eccc1820aeb708de15d637d314c02cb0e3c5c2f4f44a6383894e0a753a501e4c0b382"}], 0x12f8}, 0x40050) dup2(r3, r0) socket$nl_generic(0x10, 0x3, 0x10) 18:16:22 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04020700bcb800000000c38a9acdfa1851b3df349cfbc309e6f9485a8cfd15b9efe7727ee1d7329818180861cec2abbbe690fac1ca9449690ff56de33c57a45c4ef91d6deb33a7ec65aebc229304fadaf36e12254fa956a8b2a50450c0b6571dc9bc147cd59f6b9b76d4bf6a"], 0xa) 18:16:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:22 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0xfb, 0x10}, {0x6, 0xffff, 0xce, 0x400, [0x5, 0x7fff, 0x9, 0x9]}}}}, 0x1d) 18:16:22 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040207b4b6000000001f"], 0xa) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, 0x0) pread64(r2, &(0x7f0000000000)=""/58, 0x3a, 0x100000000000) connect$packet(r2, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x3}, 0x14) [ 656.765821] Bluetooth: hci6: Malformed Event: 0x02 [ 656.774538] Bluetooth: hci6: Malformed Event: 0x02 18:16:22 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x2}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:16:33 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04021d3b34ebc49be160afe425af6327bec0aaf59d047d8bcdf98f23423836167e921484cc83d89c76f5fe3d9fbf8f7900"/58], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:16:33 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:33 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x3, 0x8, 0x3, "c645dd"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40, 0x7, 0x5, "2cce92"}, {@none, 0x4, 0x40, 0x63, "4f7214", 0x7ff}, {@none, 0x1f, 0x6, 0x9, "f98f25", 0x4}]}}}, 0x3c) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:16:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) dup2(r3, r0) 18:16:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="f977f64f681bd38c299fa394a5c96b2fe2e9fa8905c7219e095abf1a388c059b96b87b4dce9b3d0de8798859fc961b049fb3700897623190db5a799f46c99444f1ecd7c62db018285fb70b814c2f5a435d5d10b4e6a42800b1aeedc6db1aa0b87c31b0b3bbee0fa79fbba5cf3c66c85d3de682282f00000000a641d983903cd42a50b30916b1f5d06c5eec7423f98bb2706be1e98eac1a344647cc81d1e6655d7bd3a435eb16abf638e34e62b1d1858363c2774378fcd023f5d622077a751733cc0c8641f01f2e25662a8adb6b3716d6311a4cd59a9e1189945f48beb8f0eb87f39ce80d3327a815d04994a8c57bea82951cbffd158583f8b83d18868fed"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:16:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:33 executing program 3: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="77024c335e14574a2dc3ee71125c3cd1", 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) 18:16:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 667.563647] Bluetooth: hci6: Malformed Event: 0x02 [ 667.575669] Bluetooth: hci6: Malformed Event: 0x02 18:16:33 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0x8, 0x10}, {0x9, 0x400, 0x7, 0x401, [0x2, 0x400, 0x1, 0x2]}}}}, 0x1d) 18:16:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x112002}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r1, 0x410, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x8004) 18:16:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x410102) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x4b8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private0, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3b, @local, 0x93ff}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x739, @loopback, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xb0ce}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @loopback, 0x3}}}}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x32, 0x3, "3e14acfff7a8747f8ade75ea8a66dc735a37c1a03ca7872660458175859c7bc4f0ed7d850b14512ac4a4ae3a2592"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "111ccdadcb50792eb24be6442782ce1b66f73a06e7dc22a8230030d5f4c7ec4557722c67723d9bd7743c87203d6bcf6637683ca3f156f7608da4fec4cdae8ace82"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e3717f740adbb26b7c203b9e7f7ae187f69aee4f84b9d60d29456be804"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x26}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff94}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "939587dcab7e36aedf011401d40a3da8ce7f7d9bb9adcbf8d089124a1276332869d4e6485fcf68521958afa7e956834724df05c809528c4334c22301590f3f40025c86b50a365477af37a656e90c9fc7e7d6ac31ab3aecb5952625c5188341"}, @TIPC_NLA_NODE_ID={0x79, 0x3, "de21a9bc4e669619e2f088cdb4a4ceed79a82007b3c111f616a612d56827a935a40e79892f4a2c2a0ed2f67116f8fe93df8be59d17f74f6139e5f795cf9620c83d40800eb17a093cbf75b30e9b906bdcbfb21d5aacfd163b1eee4ec3ff0bf0bfb6e8af14f3869a75d450e413eff8a51ca84c3865f5"}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "efd5edac83cf3d374caba99b9ee50724046cb30cb8d60ad10a819ec3ec9ebfc291f4aa4998e31f85655512e020d83b80e42f114bcc99fbbbbaf3533fc679b878ce602265bc3f3c4d08039f1501bfb745453681b198d9fd1a9e009dd729b872ea3e5fe6eca52c"}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:16:33 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:33 executing program 7: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x9) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x4}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) ioctl$int_in(r0, 0x8b60d6d4879fa0b0, &(0x7f00000002c0)=0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04e207b4000000000000"], 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0xb5}, @l2cap_cid_signaling={{0xb1}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x6}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0xf2, 0x9, 0x40}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x81, 0x6}}, @l2cap_conf_req={{0x4, 0x3, 0x49}, {0x5e0, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x9, 0x7, 0x4, 0xfffc, 0x3}}, @l2cap_conf_flushto={0x2, 0x2, 0xad}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x1, 0x7ff, 0x9, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x1, 0x1, 0xdaff, 0x2, 0x4}}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x5, 0xf8, 0x80, 0x400, 0xf52f}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x9}}, @l2cap_conf_req={{0x4, 0x9, 0x2c}, {0x8, 0xab3, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x7, 0xfff, 0xfffff7fe, 0x1}}, @l2cap_conf_flushto={0x2, 0x2, 0x3f}, @l2cap_conf_mtu={0x1, 0x2, 0x7ff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x3f}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x1, 0x7fff}}, @l2cap_create_chan_req={{0xc, 0x11, 0x5}, {0xca4a, 0x4, 0x3}}, @l2cap_info_req={{0xa, 0xd3, 0x2}}]}}, 0xba) 18:16:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000004", @ANYRES16=r0, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r3 = dup2(r2, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) signalfd4(r2, &(0x7f0000000300)={[0x3ff]}, 0x8, 0x80800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r6, @ANYBLOB="3dacef3169bbdd40f67b39b968a96d546d6ebfb03df13054a67e90e7090000009d25d07c"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2923bf51ab639155}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x800c1) [ 667.770731] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 667.772578] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 667.855624] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:16:33 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3}, @l2cap_cid_signaling={{}, [@l2cap_move_chan_cfm={{0x10, 0x3f}, {0x6, 0x3}}, @l2cap_move_chan_req={{0xe, 0xb9}, {0x3, 0x9}}]}}, 0xfffffffffffffe2b) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x153}, @l2cap_cid_signaling={{0x14f}, [@l2cap_conf_req={{0x4, 0x8, 0x8}, {0x1000, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x9}]}}, @l2cap_create_chan_rsp={{0xd, 0xd8, 0x8}, {0x0, 0x7, 0x8, 0x9}}, @l2cap_conf_rsp={{0x5, 0xdf, 0x70}, {0x3, 0x9ac3, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x8, 0xffff, 0x3, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xb5, 0x8, 0x0, 0x0, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x0, 0xff, 0x4, 0x7, 0xeda}}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x20, 0x1, 0x8, 0x0, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x5, 0x48, 0x7, 0x5b, 0x18}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0xfffa, 0x3, 0x8000, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x6, 0x2, 0xff1c, 0x9}}]}}, @l2cap_info_rsp={{0xb, 0x3f, 0xb6}, {0x70, 0x9, "3db6bd99ac7b2df84b33c44954cda093495ccf914dac363b87d0c6dbb217aa6ec0f76753a33271cd8bb005a84d36e9d2ecd23b34752144b5e358f89a4f065be09341614601574f532816d47ed07748b82812f64b25cdca03821beaedabb87a461ba93c704abe9a1a330a45bf346ff92fd126c57d069b1f9bd18218b7140c14ddd638246afcbd1f1bc112365e64aa07f54e27b2d432a8fb51a62adbc3cfbef8645c5b37b8a3142e1470fd8080fb233d80790b"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x7, 0xff, 0xf9}}]}}, 0x158) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x3, 0x5, "aaec67", 0x101}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0xe9, 0x6, "cee5d0", 0x400}, {@none, 0x60, 0x4c, 0xc1, "3078ea", 0x1}]}}}, 0x2e) 18:16:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xf, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:41 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x4}}}, 0xd) 18:16:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000c5fa7629d7d655418bb6aa463821af3638be707856d63101bd2431964ad51b58d35a8ab26d077b15cb26decf3157ba19f116a253a16071664aab2b622c1bb5c76b06eab66c618faebf3753659f37a649d039a6506f70c959a7455b3cb15a037429d531cb5a230e0508b14b5170af465b3d92c7cd5f9f775c70246954c9feb1da6bb1597b3cffa1fee3c4", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) dup2(r3, r0) 18:16:41 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x2, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:41 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x7f, 0x3}, {0x80}, {0x80, 0x6}], "c22dbb3ba86dea20"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x2, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {}, {0x4c, 0x7}, {0x2, 0x4}, {0x40, 0x4}, {0x6, 0x2}, {0x9}, {0x7, 0x5}, {0x80, 0x5}, {0x6, 0x5}, {0x4, 0x7}], "4fa6fffa8113332f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1f, 0x3}, {0x6, 0x7}, {0x4}, {0x6, 0x7}, {0x81, 0x3}, {0xb2, 0x7}], "a7c9a849c83e8d4d"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x3}, {0x3d}, {}, {0x3f, 0x1}, {0x40}, {0xff, 0x3}, {0x3, 0x5}, {0x20}, {0x4, 0x6}, {0x8, 0x1}, {0x81, 0x2}, {0x3f, 0x9}, {0x0, 0x3}, {0x81, 0x2}, {0xde, 0x5}], "dbd00adc8d735dc2"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "abcd46ff12c91809"}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000080000000c00018008000100", @ANYRES32=r6, @ANYBLOB="2f76d2e00700bb0e3cc8bc7afda3aab75439dd34682b19a8033f7b5a56fa48801e84774786030fcaf24bb660b6b9273c2556506982b2621150ecd849eb5fc4937ab34bf044250fbe069f54324b489d6c90bfef09"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r6, 0x4, 0x81, 0x0, 0x9, 0x0, @private2, @loopback, 0x8, 0x20, 0x11af, 0x1}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) 18:16:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x48, r3, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x48}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000016}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x330, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "8dcca2d345d58dc89dbd1c665cdba3dddd91905ce6c9578ca28bc3ad838fdeb34ec49d3f952f4387584fbc58c00d931c2dc5bc8cc9f480ea5bcce9ffca9776713fa6b96304b0747ca8203570f96d9d0adc90c474d5f27f81bdc27fbdd996c65cf3f337a67f0810823da1d3e25b7c1e382e3b46e37e32e780a90ede9d552b162addead1b70a8e46c1fd45c75eaed88143583adb6095ef0dae0107864b6105cd35adc7e2ddbf2a43244b49dc3f092a1982fe12c2146686e5069f1dcfafb0dfee26e241b0d81575ffc69ed33c690ac99a8af8c0935826963e24f6662b8782f772b85d01565f1d47be2f4a696e4f28125133eab2d3dd28d58242"}}}, 0x102) 18:16:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = dup2(r3, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/210, 0xd2}], 0x4, &(0x7f0000000680)=""/18, 0x12}, 0x40000000) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r7, @ANYBLOB="36670aaee4225fa56eb49acb0bf2c2923c34061af9b2192205eef433ff7c"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x72}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="35c8f16fe6dc"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8a38}, {0x8, 0x0, 0x6}, {0x8}, {0x8, 0x0, 0x40}, {0x8, 0x0, 0x9f06}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0xe5}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3090}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) 18:16:41 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="ebd309b5aaaaa2aa17e2c184"], 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:16:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x180, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 676.369255] Bluetooth: hci6: SCO packet for unknown connection handle 0 18:16:42 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x3, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:51 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x4, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:51 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc8, "bab23fb167343372"}}}, 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "0066ef016ab66a722aff7047077c77fd51ca74c72222bfea722265fc86de182f2909bb7a3822b043106aecd644e2625d2101bf00b8149e924a8a55a83bfd242ad3d2a4e82c390b6f782955edcac9382dedff614156acbf334b549a6c036bdefd6aa8ccbb9855f5e58194a686c33dd4b831243bb93b09b6f995d9ab8ff23ba2fb20d5f0f00fc2d1de4702d41d59fb8c991e2f042e007478d43ef08e65a13e43f007c4bb244453fb1c126fbbd7415d0bd88fea6f4d"}, 0xb8) 18:16:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x33fe0, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:51 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/143, 0x8f, 0x0) 18:16:51 executing program 3: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000012c0)=ANY=[@ANYBLOB="08000000010000001800000080403795f902902b91c58aac5a85f03b640b393e8bb80c423fcd957ca03afa32b550853dd470238a17fdab86a0f9f24a76dbffc900b8090ba9355eddaa05428554a8a7ea3788471a0670791dc1544a6aa52e1ac58199f3db3f71d450a3b0fc29f995aeafd13799b247343c01591bc18c4b187d6446753d30b4933547417b26e7b650851f14131006c382ac2d8df18b0dfad6157d01d022030b525528806859f139c9e1662ddfa6c39072ab073904534d034732b0596631585edce40526bac4f1760b6e7a18b9e85fda476845adf6263be0d0075499b2280b8bdf625e590f13ebe5de77cc69d42103a900", @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x5) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:16:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC, @ANYBLOB="010300000800000000000500000008000300", @ANYRES32=r1, @ANYBLOB="0c009900080000001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) dup2(r2, r0) 18:16:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xf, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:51 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x1400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r1) [ 676.405375] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 685.500603] Bluetooth: hci6: Malformed Event: 0x02 [ 685.510927] Bluetooth: hci6: Malformed Event: 0x02 18:16:51 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x5, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:51 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb5}, "47fa3fdef2a7cfbcb9dc7e75391383126a3a02a5eecd6ce106367dcf5281534c984f4e25c8e7254217216d729b0741184307a56eca04dabb3334a27d2fb7a0fdc9b01897c315e233be89f47b6194dc3d6389a83ea7848e06c2d321ce95de973a25b3522dbe209f515c08ba2c18d5f4347440d2ab82bd5097caf3c462f914918bc91b194a969b5dda919d69b8eb30892ecde2a9ccefd01b679022089d7a30847d64421b0b8a521036b7d5726aa7441dd9c18ad29e8e"}, 0xb9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_conf_rsp={{0x5, 0x4, 0x23}, {0x101, 0x8, 0x7, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x7, 0x4c82f182, 0xe1, 0x8}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x1}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xfffc}}, @l2cap_move_chan_rsp={{0xf, 0x3f, 0x4}, {0x9, 0x2}}]}}, 0x3e) syz_open_procfs(0xffffffffffffffff, 0x0) 18:16:51 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x5c, 0x9, '\x00', [@pad1, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x18, {0x3, 0x4, 0x20, 0x5, [0x10001, 0x7f]}}, @ra={0x5, 0x2, 0x800}, @hao={0xc9, 0x10, @local}]}, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xa) 18:16:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xf4, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000000) fchown(0xffffffffffffffff, r2, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04320daaaa06aaab000029002f79b615302dbfe6eb2e69191a3cf758e3a64ffce0c351f4625e36756a0fbbfd4dde44030f5288183d85d70874e510e01d08fea67288a1a36fa381e0bd22ee11f21a078ebf7eae44876014fd70a30f7a1922f65b259089eff48b536a40756ba21ed3bcc48555cb8954b2df4e52910634527a120077d96ae8f98c31b89459872ad2c9052770"], 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) 18:16:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xfffffdef, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:51 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "d8cade5f0e1f53662f5ae9d36fb65a540481841df52921fde7c8c5ac7179b77de9138569121812f8404c234142e1f10950f26bc74cc796f5b45d5ebe546500d7391fe5e9654070720c4d3343af434cc8985c4d6af04a2025ea6da2122b8cb2e2bcb807fbb5f3f31859df0af0010315b4777c7d94d12fd50ef001760ab78c7780472e710b22900b40a4fe4ac1afddfad5eb93e3b8cfe266dbb771d0dbd1b1eed5c7a97648d0ec621126d0cc4999aed538c1a219b485f3c098d7aacb7058d8cd2366539dc2aec29dd6f5bee806e93ed9481afe61b27b2cb8c4829e4beee7d273fa8bfa74f0fa3b530a0ccb1c45ab08f5"}, 0xf3) [ 685.700098] Bluetooth: hci6: Malformed Event: 0x02 [ 685.700969] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 685.708468] Bluetooth: hci6: Malformed Event: 0x02 18:16:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x200, 0x70bd2a, 0xffffffd3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4ea0}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000011) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:16:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000000000050000000821b400", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000800000011000180e8880001", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x1f, 0x800, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @remote, @loopback}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x180, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1c000000}, 0x80c4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r11, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r10) dup2(r4, r0) 18:16:51 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x7, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:51 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0402ee9412f5bb71b4fd2210c25b8b6134cd07b4b600000000b0"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x3, 0x2}, {0x7}}}}, 0xf) 18:16:51 executing program 3: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth1_macvtap\x00', {0x2, 0x0, @private}}) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xa) 18:16:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x180, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 685.717426] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 685.856967] Bluetooth: hci6: Malformed Event: 0x02 18:16:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x64, r5, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x19}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x1000000000080]}, 0x8) dup2(r7, r0) [ 685.869888] Bluetooth: hci6: Malformed Event: 0x02 [ 685.882803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 685.895743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:16:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x302, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:16:51 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x8, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:16:51 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0402070001000d000000"], 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x2, 0x159}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x12}, {0xfff7, 0x3, 0x9, 0x1000, [0x2, 0x7, 0x200, 0xffff, 0x1]}}}}, 0x1f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x6}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x49, 0x4}, {0xca4e, 0xe39}}}}, 0x11) [ 686.055010] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 686.056985] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 686.098147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:17:01 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209aacdaaaaaa00050900"], 0xc) 18:17:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080003000a0c573ebf78aa8577e10f05279db49abb2da35b12733498e83180e7a811a76300abce3aae2ea0a6d3b2af841f5ab5e5bb47244c34cc23ab36cc812ea0a76d9edc786b928b48ef8d6eafb0513245cba9f9f108f02fa33b4ef0a76e4548e24e2e8da62c588950afe8346a47fd17b3979bf9e5fa9d28", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:17:01 executing program 7: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = fork() r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)) syz_open_procfs(r0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04013f00000000000000"], 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "8d042764999a22161cf0c4f6e652ac868df5f3ebf8b48c375215dd7da30b209efcabd0d245f499ec786e205babbb56cba17934fc8d6279a2339947f1e4eb678d425850b61f03d49df6f0e1f8a977e4f979121df8f4c57dd696cb8fe616a1a9b550f0698fcc16e109fe742a0cc83389fbe81d9e8e143d2efbc2c59e40354805c8ad43b59fb4c50ec714492d0cfcf6926c131cbf9385c0780a156b46e2eeb6d8a2411c0702ace2b491de76dd41bd707f10456ce8bdb921f49967fa8e2f1dadf3df083bbfc9faefa19eaac5a8785a9e7bb5cf203942c34c8180fc5e8c07bf9c4719847edd5bd7b29f5c9dfd510d3dfa0f6beccd326d97fd2ffff6d0558d511f88401e90eee65291cf8f8f26a0617c878cd2347857480f1df540338a5a55263f0c0e65e8b60bc8950e96e911f92e393cdfcb890fc963befa9fc9add587aa1db93f2255291f71106d82278d620fb4c26837852b0b98e0f083149c45730b6983a4b57dbd7da675fceece87589908bd26c17f903d0932256cf5110c56e66bcdacbe3fb884c8300f3c47f5cba3fbc259f94179d31291bfbc758a29a397c18c2e372cff76d27557ff1fa786da73e047c723680d767b2ab0c62b641ec4642df8f14f9f2bcf338a6ba28428a218683d52614fcbf0823210ffe6a359fb41f654b585dd0183136097affa238c31bb53a2bd00df021e0d60546d338c3ce270208c127f05ba9aaf44cbf9fa5bb68b1f176a15e6b30b75cafb6c456babb58142ffacdb6a0ee9bf248dda3ecac3ccccdad0beafc816a30b482f910dc3e5a95e15f3dd012abdb777f739f51b602c13de7f4f14aca60383cf0361cb7558eebe0513724e5ce66b2036c48a526f327a139a308c096af2bc302a4373b0689f298926219c3616abc947607b3b0ddb781a05e28a7a774116880389e132b8c5bd72b5e92865ebeca64460cebc2b6248dfc04927209379b935a61c267888ef6d4bc49d7d1da503c65e69cc1d5e66e4b97ddd0c6d1c388e39c124d99a13edd2187fe0b22464de067e88a955939ec5e7afb4abb120108b2361b17b6f6e9630202a35bb9c9747279a84acb7b7a5602a6756191541cec1e7fdced0f085cae01b2d88b31c5050f31aa6993293a7ea7d06bb35405b4c532b08a72436088a9e8e44c61c0216454dc9395dc56e655dbd8fc60cece4758505fc1345eb3e24cd2264c56b62b25d5b12d44fa4a2fec68cc4ed9350b1c7eabd4e953913b0d96df8f26b3ce19b7e4f6f54cdbbe75f9132c83f902b29bc313438200f33956550e8a912e98a05719a72b9cf8f6002215fd0c826de0b512ad52bf4dd778b74a0af0f7be6f9c7c4423863d4e66d939fe23dda5b9ae4f62e656a399324d5b6aec1ec20e85d5a67990a2672ee19c403a45ce67f64921edb1ee255c6d57ec75fa05f77c92228a62f85a4243ed554b8d1175298de7be5400c871f49dc41760a276f61a714c52e218ada2d827e340532eedfee1e6f1b55fe6a86cf0cdbbe69b9306c07e9fe84291c8d06a1d899568e4980bd2c02388b9dff25f4c0408f4800a06bf75da471846b1de43340782158f5258925c5f0f8bf7c672fbe66bd69e87b2a3e658a56093b57bf59d9bb5d7c6b004d41157dbfc22d1c7f457bab5e4b1c4a248b6baf76343d106e2139eda2da934e14ec34bf22075fa14bdea5659dad50391ea40ca825e39fcb88aa80aa189431074fc6e75a0ccf4640704c37f7bc4cfd057376fd919f6e059e0d945fce8ef45fb4c00ccd598a33806499684211242c5478943b44bae5e90845c4d7a0dc540ab0fee3b34c47a4d898de54087765646e66f5e8318b4df8b504f36e3079d3e4e7595e1c0eeececa743123950644580b8feb513ec128a013f7092f42d18206afbfff2247c0aef4b13f9222ef033dba4d8ab966196ce16fa872a622ce1f50297cdc268f283aefa3145c17e495853b4d56b9ef19dc2257f5b576c39f9894b771820ebadc95d0d8971efdf3b95d7a8f1916aad09708f5664b864961bb6046627ec2a399e5838151d915d4f2cdd77b0e1e6327e0906159d873e4ef2ac366b74158c2f9c02488c2470a6fb2a78c5fd85b4894d6e2c6416376c0c804c1b17d52e8b6462ba0cbc05ad68ec467ae95ca37519102c7146fe755711d4133456aee9edadd83defce4d9965da48aad0fe7501601760748e827895753fb5720bf92a6194ab0c83954d3898714c928544fe8ea9c95e40c780b2f14cad0dbeeb3d18b8a2e116acaf9a8af54e21d0f1f778a270a61b3d8cc843dc782e71f26bdd468385275a861f822df723831bf7a4d2358e72e553f9a06bd5331b7989c97b7d98a396e70b2bdcc8abf2208bb117565d1cbc2091f63c44d4177730c01d8c196a3271046641c68b26d381917c522688311e760e15507a30e0ba439517adff64b993f10b10bbc873fbb1c0519871ec96ca36c91f3241efec1ab74ea63ee4d9d14aa0a66e63894b9c5ffd62f0756e03683f52041f6f8fe46026376c4572b094cc302781cb70425f36b9615285c1c159325a1d491489404778ad4171a89e53e82872a799791d1c01a0a384f37ed70b25fca9d602fdedd1006fcc63ec74a8619b3372ef35d7d496b24d86c2ccb3be1245a0e6e176bf4cd3f36961f723ceb999d03f828bd4effab3d08e27c82217ace2fc4fe55b3bd40cadb0cd05f18c7a3c37eb82f5117c618a72923815f1b7040a566670be8fc1f3fb3c8be4cb8dcfee3315c246d6e000e938c2513834d63be33bbf6890128c51714831e6af36cd35186f935cadb2a33b680317f8380349bcd74401ef352637ed595ed5912412fd5f928707dd43f2f430526aa96a00c7c870aba3b856c9a076368e17651ab639596df246da2677fe4b081885977c0ea9b49fa46a8051f21b6cf5098c622881b4b267782348ff9834f653a4989ecc6714af9a0ddd0f0ad352eb6d870ed1954f1ecfe909b64317a648c4edd82c69457329c91ff212015de1be5c4be95ceda6eeceddc1420acff668e54d80609ceaac31492044bd2483d28b1080f0d6401214550caa40c79ceca86e4bde759d68b7ba4462432a14fb88da70d7f3a0263ae8c359c8c8f303b1080541add74874e501d93b8f56830e000407b9bf7960b6f4764f298c114e6a653e1b35d6961188dbce5178dd2de0b82457382ee3312610cc0cc8540d366526511d8d5cddd9cec4548aa259c0151ddb439e5e2a60bf14c258a6ee3e184f0940b92fd1c0fc218aaccfedf04189baeaea446d62679674592d78ffc85cc8ed59a75259e51b860c7815b544d614338513ffea0fdfb9df0e1595f6788ae71e6355c8e2b6d04583f959d1104a6de54c81c06e77c9ab56f85cd45d6800d96bba961e82b2b6dd9e094027bc2bac24604021538303640240862e6219a0d4634972cad8d3111cbc5522a9fa1df241b2c7da002927d2b2e942344edc637e792786a84ec7c28686bc4d500dcb74cced364a2c857cb12606a8fc2324869548d86b4b32a3153c97e0338a3584595b7ad4f476f1ae38fb5d617df091026a2e368c9b676a59a82cf01fea3d406fa2a0935e34de55c44a6f8cb78e4becafddba00e07f7dd79ff340f115d5350a71985d94a9df2304542234f011cfe45d5d92c2eeb69d270ecec34a7d911b251ac1dc6c456137cba685b4adb9319f1b436365d6eb4668e91183179b07c753d2ae0f50803f508952bf9f0ef971498080cbca8771362af0a74eaa740748ae31a9a2007559f4d41f73104a3a791304a8e90afe49b41e442dd922b79986dc02fc4746e9d30ab87d4b87f90cd8b5e21bf00f408030f8ff8790d187c319ef6aea6922072226f8dcb3fc415fc830d9d3e4787aa99be7185273dbf517edd787811c6f8e49b385237fe509b47b776049b07a6b540b366aa96d9f29f1213275c5d7f5cfc9df16afd2d5e0d0fdaa847e93a5ca80b230e085dd8966a7fd9758c7fb6781f93c133514b2cbda1bfec45a9e0354f8cf84ae7b289cc3d3d35b3452ce97730b57a68a6ee66e91402f6a54ff86f7a1b5cffe5630e298690dc545020bac15bb369e6ce50237ca619da038fe2f6e6b2965e1b481c2d1a9272d9e9191b8dfc829531a7cb24667476f266c8a522984c874bb05c81dfb2dee59bd30d86079f18cd2f8203ef57313fef8f468615e36a78386abbccb456c7fd983336469fb4ed5cb7cc26184089a5141436d7cdd53583181a91641518eeb8f8ef9b61fa6e76e5ae390a18271bad14812c486d41c167b60eaeb836cf5bcabdd3607e33e7c8f545a81666ccf8dfe05545cfb205704015a6a4888c1380418ab8a1e5bfd67894c6256f52a6217d0b00c6542cabfa0d4831409fdf2007e2c50a9ca5d9b37254ea1e98735e39883050907d6a371b85ac5097d4e1bf8f10bf8a8f48d1cfb2ca789c3fd1c77078bf3006e08d185e6addc2b095c6b28cd39727b0cc2cc38aad10b87c8f1605f70fe9afc262a106652f65092f5c3fdcfd9f93767da451955fdfc5d7b49257402598fd01099fa67735f8188d75e2517aabe621373a26b59ff4561dd79f475d1bf4aea8e6ada95ecbf2a0c9613f8fa485714fd432d4e901b977c3404bb87c75f7a2fdabfe361f435746319293fe111e76df8399a8d7ff4856666e25006d3bff24cedd7caa3ef9fb685a3437b2789681a3cad567c001e3f0e43e48bf1ded71b39c532e1f34f363fa466d2484ec7417d4c2ae992dcc16ca714c7c696a4c8c26a9b8b0a619ec7efe5cd4a4294fb90c6122347a04eec9e4b73b13432abb97c077f332601c8baeb1f58d7530dcc2a421e3290b231983e23f0e3e66aec9eab6373d147c2bac67595a021759812c6cfcfd266f4c558407349775ec6e43a265194e5b46b60db319fc1c6b0b3ba962d56a26ac02d15b8298e36518c92c07114c68ae30a3ac2e14cdef875ea25bb8ce59adba952d0fb153c9f102dac4f03ecc8ae37dcc8b271aa2f7a0573b5d77acde8ce56e51c8fd42535a2ddee9fd28f21a3e189a9d2aeca662878900083f37e5adf43be4d8b4388e89aa310106f7939c907ad66765f23870f0eea84aa6f8041b151595527089cd2db7443722ab5ceae1ce1ef2625ac60dcdc6c149792b4c9d94eaab2cb443345771e77675b63bd1bd53d71117af5209399b47fdcdaa39fc0ac6489bfbac661c7bbe749ccd39699672350655566b47537cb245968fe205636b11a9d732e878ddf49d338f2c63f7a7f00df381561b9699cd85ddb458c414df2489c84fb5b0233c05461e72a48b653cdbed73db71aaf774724a1bb39fc3f2302896e4d3fdfe74e33080c63c7ebbb4212c08c986d63cd19b241e9b038c53a4e02920a3d5b93fbca889c6ae187444a9d0bd5671b54078c591ee963f5563cc846032210ba8b4fbeb18d6d3c799c1afb6a7338d0385938241f3a8e7376f58da5fd1ea3365f2b9650bea64884523c2914b606fc85b61cd12c8682ccbd9b57a566602a31b74621d0381d0a691676f9848c282b20cbaea1868b4670335ee91b46fb2a42cf18a8a8aae30f6d40f0208feb19a1e3a538666886c60036faadea9903133b00396b9f3c96e400a0116e011ad5a5451dfd47cf5635991308d9bb71f0e2bc0cb4c1a5cad8db73dca14d273a7990fff28224e45600f2da3569d22d2cc239918db6cb8b018fc55d403988bcefef3ad0158dff1809b0b3b12f10edce71f9780d30ea35974c584fcab1df1a826cf9a01401224cc85bc24148673b63cdfaa35df50e47a1f2cdcdced7a97ed712f22ba7b95b067446e7456e59e9846eaa0b7211f51116002e7b03f29af50a5fcb02872329f5010b6"}, 0x1004) 18:17:01 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x9, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x33fe0, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:01 executing program 3: r0 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000000000)=[{&(0x7f0000000280)="3d7eeeab88d77d5903de3b0af9f3be36786ed7bd35bc5e51c91237500deebf804cd53fbd4803dd0d2556e118faea53bdfa726917f4f3333fbc5e0fb3e2db835c2c7b2b0a60838150d555305488251871828d8539aa02a6fca20aa391311e774920f16cf95c3248364464751753b8f9fa63bd7b4dfa7c6dac1435c83f264a86dcd999de2eaa8e8be34adfc503a502d498eb32f056b685566490afe02b0cefde1263ea26189989b6ab95ce5aed0aa871038281d9af45d5c9a5eadd6a6332a7d9b178d97ff2beda12573b228457bf02d06a075ae9177f09e01b909b84a98ed1c118ea5b279e40ce01b226371a33e0f97bb6051d0b3296", 0xf5, 0x6}, {&(0x7f0000000240)="55971b", 0x3, 0x7fff}, {&(0x7f0000000180)="49517413c1512f28ca9a63c4b120b3cf9826005b69a7839762fdbd732cbaed03ff69e66f917412747d28006c37e70100901054b8757500"/70, 0x46, 0x3}], 0x12408b, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000009228bbb24da16132c4d5ed037f42be068e69c25dc5bc5823cdc2c7e2e53a757540f5e7c16a4cafc8026ab8413b99ec302caa1a788c4a3ee38f9ebb62f55be5b17ffdb01ab70559eeb0629f382612e6a400f8fb1575284492a0fa0ea6a0905a6659a17c28e9c332bf9b8154e8e71c7fbbc1a2a883d633a0ae37b270946e3d8fa31ab66d4d4e9bae7feff412714631e663f5f0d5228cde151315efffeaca99ebe2ff89b0eb87c39adc63a21f8340e12b8ad8ef8cf72903adf947555e90190599186ee183366523bd3ee27c249021fc76ad51f05e4843974f"]) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r1, 0x5323, 0x0) mknodat$loop(r1, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000380)="33f43cde0ec3dc1df9c3e32c7436120f87bb2c6244bb08f83427ac6ad062987870c40e8b2c1259152f639866e2090e3e5edc290e3436fd3ea836ded829db557dc4e4f56a1ce34eab0f4073e545da35a241794fc644c8e8bc8595a18a758da5bff41c20187d9d8fa2a3a5fe45eaa711df3fc813e067b131eed7c92d66c70ad6bebebc81f288e36e4a56a46a952d94be17c7d5eaf94d031a9e7232b0c2705b5ded1c91f51ccc34954509cda01822c07d73ebb22ce00e4b2c1a508742617949ea674242a4", 0xc3, 0x5, 0x0, 0x3, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x5df1, 0xffffffffffffffff, &(0x7f00000004c0)="5b9e4a8e87a24d0088eb0ac35c5cb89d93a4bbe03fd4fbeedfb0006a3f8382ce8c061718e59de954db69c92de1328c68d84401d3d2c98994863dab74111465988a3f0af92ac2e46b3825725ee1defb7158f876f1abe54a3bc32637c41cf6ae6dbb58bfef0ee5e26de0585effa355032dbcf62366d88a2cf808d34b1cc03bff3e0bde86f16aca2871fb3cd475ef02546cae5c15d5bc79813522946d232dc55eb5f4393b71f300738c7b0072dfc724ec4bceccb27f99d0244849e4a497f34a73d9df284ffe818e345531d8004a3c694ec9759f9cd9cfd62cd3bb", 0xd9, 0x5, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000000600)="3f979678a67d73881902402fe22cf1c59db443c480ceaf03b158b1c014e341a7fadcaaff78c02ed00048153a97cc4659e2716fd69628c5f92aeb53a9ff4b3c0ca6fd8747f50460840813a94f6db7217a9006561bf14902924fd841a74a26605cb89832e21f95b504a09c488c4469d097dc5d5dd0a4df233564ff8bdd3f3a2d883140566e34f3471848f4172c3f26454e323a3179507392e213f235d2717c002f10dbedec52c9151db92721a813fa6355b6754d1d1c302a0849e29cf3d00237da825e687beb565955c660a5a083bb5d0824cc34ad6dec237dfd72eacbed6f7a4cdfbf23fc5232414520bc6cd37857ba205eca641ca7", 0xf5, 0xd50, 0x0, 0x1}]) pread64(r1, &(0x7f00000009c0)=""/117, 0x75, 0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0xaea9ccfff53e68e5, 0x8, 0xd}, 0x18) name_to_handle_at(r2, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x101, 0x7, 0x8, 0x4}, {0xf95, 0x7a87, 0x20, 0x3}}}, &(0x7f0000000980), 0x0) 18:17:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x305, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000801) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r3, @ANYBLOB="02002abd7000fbdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e00a80066697273746e616d65000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000005a00a8002ebdaa3275a320019219cc5b5722b29a14495e2b61f1817f0e2982ad38b91b4014afa8ccb3eb2f42e9cba78d854bae26ad72db6bbcb84236c68a971616b40cb8c4f49d279a618b4e399334141987ddaf90650173d2ba00000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x12c}, 0x1, 0x0, 0x0, 0x20048084}, 0x8000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000200169be9fe35512f422aab7aa385e418ce37aa0d77fd84fec34991cca4541b493767718070cda3d119ada56d4017eea5448807378e5704e8a4dbcaae5eaa13589cbdd271cf02ab0bb4a0e24ed65058febc6ed36b6b72246354721a76e6a74723ff9c78a433eb6ef3f10931bf89d141e37d1f25b62aeb3b615f70fe2c381d8282bb38ed80c1d8e182d0502984dcc6", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000099c0), 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000009b00)={&(0x7f0000009a00), 0xc, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x24, r8, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r8, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r9 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r9, r0) 18:17:01 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, 0x0, 0x202, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a25ffd422f26f7f462dcb0b227d8afb516635ff3d92b79dfab7d6c67de1795d0"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6de45eb3992653df025dc4fb4f5a4fa1d2b6a8bc7cf4e9520be923ad760f4e9b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x120}}, 0x20000800) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:17:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xfffffdef, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{0x5}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}}, 0x20}}, 0x20008014) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) [ 695.983403] loop3: detected capacity change from 0 to 127 [ 696.042439] loop3: detected capacity change from 0 to 127 [ 696.056542] Bluetooth: hci6: unexpected event 0x01 length: 7 > 1 18:17:10 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')h\f', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:10 executing program 7: r0 = socket(0x15, 0x6, 0x7) splice(0xffffffffffffffff, &(0x7f0000000180)=0x3, r0, &(0x7f00000001c0)=0xffffffffffffffff, 0x8, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) accept4(r1, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80, 0x80000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r2, 0x5323, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xfffffed9) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, r3}, 0x14) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/10], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x80, 0x9, 0x2}}}, 0x7) 18:17:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x1e5240) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x2a8, r5, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2b7, 0x38}}}}, [@NL80211_ATTR_TID_CONFIG={0x288, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x75}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xff}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x74}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x12, 0x5, 0x2e, 0x18, 0x0, 0x24, 0x6, 0x0, 0x18, 0x1b, 0x5, 0x36, 0x30, 0x6c, 0x1b, 0x9, 0x24, 0x12, 0x30, 0x4, 0xc, 0x0, 0xb, 0xc, 0x30, 0x6, 0x61, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x4, 0x3ff, 0x4, 0x3, 0x400]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x2}, {0x3, 0x8}, {}, {0x3, 0x6}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x5}, {0x2, 0x6}, {}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0x6}, {0x1}, {0x4, 0x2}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x4}, {0x7, 0x6}, {0x3, 0x3}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1}, {0x0, 0x4}, {0x6, 0xa}, {0x6, 0x1}, {0x5, 0x5}, {0x6, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x4}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x7}, {0x3, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x3}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x2}, {0x5, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0x6, 0x4}, {0x0, 0x5}, {0x1}, {0x4, 0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x9}, {}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {}, {0x2, 0x9}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x5, 0x7}, {0x6}, {0x2, 0x9}, {}, {0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x8}, {0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x4, 0x9}, {0x4, 0x5}, {0x3}, {0x3, 0x3}, {0x3}, {0x4, 0x2}, {0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x10, 0x30, 0xb, 0x3, 0x30, 0x2c, 0x3f, 0x36, 0x5, 0x5, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7a0, 0xc, 0x5, 0x8, 0x4, 0x5, 0x9]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x0, 0x12, 0x1b, 0x36, 0x2, 0x2, 0x3, 0x1b, 0x4, 0x6c, 0x3, 0x18, 0x53, 0x1b, 0x2, 0x6, 0x30, 0x24, 0x60, 0x36, 0x4, 0x36, 0x48, 0xc, 0x18, 0x1b, 0x30]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x40001}, 0x4840) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8) dup2(r7, r0) 18:17:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = dup2(r3, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xdb}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1f}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) 18:17:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x374, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x302, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:10 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x5323, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0436ed71e2aaaaaa00000900"], 0xc) 18:17:10 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_move_chan_cfm={{0x10, 0x40, 0x4}, {0x1, 0xffff}}, @l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0x7, 0x3}}, @l2cap_conf_req={{0x4, 0x6, 0x16}, {0x2, 0x8, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x5, 0x7a, 0x8, 0x8000, 0x2}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x16, 0x2}, {0x6}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x6, 0x400, 0x200, 0x1000}}]}}, 0x45) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c90048aabd32cdf085ce6904277020210d7778e2a1dd3fe39b4ce8bea53b77e6fd4e56669f6bb1a923a97cd9279b9396dcc4dbde4d2b4ba4e90bfbc544c434e32566621c1a2400625a4e8cad5a99579275d8e7"], 0x4c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x61}, @l2cap_cid_signaling={{0x5d}, [@l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0xef}}, @l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x4, 0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x1, 0x2f}, {0x2, 0x6, "dbeb9c87c55d2f99c838fc0460c345c4397e717c286bda1d6b2814ed12502e939cde2f20c2c4e242a9b331"}}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0xff80, 0x1000}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x7}}]}}, 0x66) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x26}, "4a92edeba3e07e2809bb530aa23f6e9ba1a66d0f94aecea7168c6e86cdb41b637f92fe0cd786"}, 0x2a) [ 696.119474] Bluetooth: hci6: unexpected event 0x01 length: 7 > 1 [ 705.347836] Bluetooth: hci3: SCO packet for unknown connection handle 200 18:17:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xfffffffffffffeb7}, {@none, 0x3}}}, 0xd) 18:17:11 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x1f}}, 0x4) 18:17:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x305, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:23 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 18:17:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:23 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x3]}, 0x8) dup2(r3, r0) 18:17:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x374, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x5, 0xc8, 0x4}}}, 0x6) 18:17:23 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x1) syz_open_pts(r1, 0xc0080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006a0001000000000000001d000a000000776c616e31000000"], 0x1c}], 0x1}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x40, 0x5, 0x7, 0x80000001, 0x1, [{0xc4f, 0x7, 0xa, '\x00', 0x4}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') sendfile(r0, r3, 0x0, 0xa0103) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x29, 0x1f, &(0x7f0000000100), 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x29, 0x1f, &(0x7f0000000100), 0x0) sendfile(r4, r5, &(0x7f0000000040)=0xfffffffffffffff9, 0x100) 18:17:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103120080005cc335d8b53ddb0000000005", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) dup2(r3, r0) 18:17:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="00112521cf928b7ccd48ebe0871f1dfa9f7202f116c9cf95d7838c42b767a70baa17f0d882cf15cfd74ab417471310fb1881a3cf4db70ad09e4c43ad75d392ed"], 0xc) 18:17:23 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x29, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 705.352809] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 717.592432] Bluetooth: hci6: Malformed Event: 0x02 18:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:17:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x3, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 717.692319] Bluetooth: hci6: Malformed Event: 0x02 18:17:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x40}}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r3, @ANYBLOB="53f0aa57e9119320022d62393471776cee2dcd882bc570aa26edf78977a3a3455343c10d4485"], 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:17:23 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa17000009"], 0xc) 18:17:23 executing program 7: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x121}, @l2cap_cid_signaling={{0x11d}, [@l2cap_create_chan_req={{0xc, 0xf9, 0x5}, {0x275, 0x72e, 0xe4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x40, 0x2}, {0xb31}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x8001, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0x3, 0x4}, {0x4, 0x9}}, @l2cap_conf_rsp={{0x5, 0x1f, 0x11}, {0x3, 0x6, 0x800, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0xa7, 0x2, 0x0, 0x200}}]}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0xf185, 0x5}}, @l2cap_info_rsp={{0xb, 0xff, 0xb3}, {0x0, 0x7b54, "95848953b75b713d39cf06594760d74843cdb1c34a80904e20f98b1eac0a497822e3cee5f9fc19b070489326247aeccd875f8cbf27107b1d2a1e688d4bc15e9d51c9d2a1054ac883f8a03bde14fb194e06be981ac3ac22a3787c13c18088189f824bbfd40875c7ab55b27e20882dd6b0ddc8870b37db0ac0a9cf2e688cdf9136aa15ac101f6fad530a6b945a35d8007f27316d0ddd272dddc286d1de8e569c9c5d0e81209d8442c33b275ede096be5"}}, @l2cap_info_rsp={{0xb, 0x1, 0x26}, {0x8, 0x90, "4b5c8f659a42b60fae5cfd431be43b0b0344e6ea82a0591c340e67002067b550eb65"}}]}}, 0x126) clone(0x1080, &(0x7f00000001c0)="dbddc4c03698587a56717b0e5cacf1efc72929263e3f9448b98903a7f57afdb8efeb1533659c60b6622e5cd7f7c3edbc1a81cd258f9a10342c779412fe510a317174f02bd3edf082c05f80a53f22a25830", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="418439f36a9b697016f5b476c9d97a3f215efd05501596c4bfbd8b66faf25655f5c7ea37f6da17f6292d4bf989ac31ecf27cbffd43645d1848d16716e4a6f2bd014d4378c212d888d7a34079ec867d6197e7acb338ea45027262e828cef6761f178deb2af15d09f59cd20219ab0a9bbd3c3fd10ef8788bc75ec8164db1150de6cf11db1b515b97fefbdec685acb2bb98cc2ddfbcd11b771538e275dc8aecb816b7ca1ffb8a20fa7dd42c0e92") syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xc}, {0x5, 0xeda0, [0x2, 0x1, 0x5, 0xde]}}}}, 0x19) 18:17:23 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) [ 717.894346] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:17:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x3, 0x30000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008005}, 0x4) 18:17:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 717.959947] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:17:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x4, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x3, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:34 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x81}}}, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) 18:17:34 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x11f}, @l2cap_cid_signaling={{0x11b}, [@l2cap_disconn_req={{0x6, 0x81, 0x4}, {0x2, 0x34f1}}, @l2cap_conf_rsp={{0x5, 0x6, 0x23}, {0x7, 0x1, 0xe7, [@l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x743f, 0x6, 0x10000}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x9, 0x5, 0x0, 0x8, 0x48}}]}}, @l2cap_conf_req={{0x4, 0x2, 0x37}, {0x101, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7f, 0x0, 0x1000, 0x9, 0x8}}, @l2cap_conf_ews={0x7, 0xffffffffffffff90, 0x80}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x2, 0x5, 0x9, 0x0, 0x1000}}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x3, 0x6, 0x1, 0x8, 0x101}}]}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x5}}, @l2cap_move_chan_cfm={{0x10, 0x3}, {0x0, 0x401}}, @l2cap_info_rsp={{0xb, 0x81, 0x96}, {0x8001, 0xfffc, "9607141b7ed86a25c638dc6040a55776013cf4225d9012d01980779ab3477652085d55617a13987f090959b3df0d1169cca95d704dc4912d077522bed5214073bebd617bbadc39a4448bbef1453f3054161ebd5972842399eac2812a21d8252707f3288f866527ac548656fd5e5775ce736ef2bbce7561d4230a82a7737b08274332051331652c827f4b6ca6ee31272380e9"}}, @l2cap_move_chan_rsp={{0xf, 0xdc, 0x4}, {0x3, 0xa2}}]}}, 0x124) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x8, 0xc8, 0xff}}}, 0x7) 18:17:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fff, 0x4b}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 18:17:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x44}}}}}, 0x28}}, 0x4840) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:17:34 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:34 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x40, 0xffffffff, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x34}, 0x10, 0x80, 0x8, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008041}, 0x2400c080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xbc, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:17:34 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x4, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x5, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 728.708863] Bluetooth: hci6: Malformed Event: 0x02 [ 728.716278] Bluetooth: hci6: Malformed Event: 0x02 18:17:34 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x7f]}, 0x8) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x3) signalfd(r0, &(0x7f0000000140)={[0x8]}, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0a3209aaaaaac9e909d0dc96"], 0xc) 18:17:34 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "18ccd109a1f041fdea9e709fa5adf9aac0bbb8c02852ba21c003df54e8991a7a24857edd15672c214a7d9811cd85657e17a65978b916c66415a3ca10817a4ef7c0aa0cfe6f887343e889ee24bd277266f2af98e0d387823546481ec7590e404ed987f37d74010010625ad9a9fcef2546fc6ad23f57106c698d85a3f01d3f584d8441020f7f09c2abe0ca8be5798e"}, 0x92) 18:17:34 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x32, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x7e}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x78, r4, 0x400, 0x10001, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xcc}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1a9}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x4080) r9 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r9, r0) [ 728.941902] Bluetooth: hci6: Malformed Event: 0x02 [ 728.945132] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 728.945519] Bluetooth: hci6: Malformed Event: 0x02 18:17:46 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) 18:17:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'sit0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x118, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xee, 0x80, [@fast_bss_trans={0x37, 0xd2, {0x40, 0x6, "cd2ab840cedc84462617aff395445238", "3f94a5e9ae63f1f06172c9bdc1ae7ecf42f79c7d940a78ad3cc286905b634116", "6f292fd933a4882b7cfccce6d059485c2104e83e50adc1371b475e839ed838b5", [{0x4, 0x28, "6e440e3d70e34af531944bb0f2b741ff5ba6e238141244e882d593a07e027076c40daba5b69519c6"}, {0x1, 0x7, "364214cfb2adb6"}, {0x1, 0xb, "dbf607005ae56bf3fa4d00"}, {0x2, 0x1a, "4cf00fc0f61175d18ebaaaad5ed21d59ed2eb845c3349b337a5a"}, {0x4, 0x14, "bf97c15e73f0e8b5db1c41ab6103feff352ffb66"}, {0x3, 0xc, "3bb723919aa052c1f95f0cf5"}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x5384, @void, @void}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x8, 0x6}}]}]]}, 0x118}, 0x1, 0x0, 0x0, 0x20000050}, 0x50) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000500000008000300e086b39fc8d420285566f8c0ed0b9bfc4fc72e396835f3680d562dfad604027be50663e591c3bf0ac17dee8fb6815a84b2e11f8bbd7bb18e7d56baffe5601e9ccd2f78cd8e57bf35bc546400cf78f99eb54811df273205027b10cf2df2d9007a6a36f9115c67f35ea2e4dc997c5e078d93e022936f9bfeb700da3d1e269a522aec4f15e62e150800"/166, @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r6, r1) 18:17:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x5, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x6, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1bc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000100)={0x0, 0x7ff, 0x14, 0x0, 0xd}) r4 = accept$inet6(r2, 0x0, &(0x7f00000001c0)) preadv2(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/239, 0xef}], 0x2, 0xe6c, 0x4f, 0x8) sendfile(r0, r0, &(0x7f0000000040)=0x40, 0x5) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r5, r0) 18:17:46 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:46 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x6}}]}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5f}, "d7dcd33aae77743dc0eddc80c879e9596501df4b78e56d712ae14d23f7821529b244149c5397912ab4bd6411a3ad330b119a40d7023ab91cf7523497d92290916420aa8fc19a7ea38a3aa2c7857a0c61a9c3df66eb23ce0abdb248db92b06d"}, 0x63) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf0}, "dba86849e09311e834f500f4711d8ec57b4c8271107f95d64bc75248c70ba08354f038ecc34a4c1a0802d5781c5de9ebd2595d96a4735e36810bb772ab005906bcc79c308154024b9082e8cd8543ecb59979da649c3be11c076b34e73e6353ed5780bfb52e806cc82d56ac4bf089d220eb72a32195ac1aaa2e808c701853eb13464d16fd862fac55b7394371a9d0d623122653bdbcd729c5d920d54ac8b8923fd49be65f58aea5ba5de6e5344a20abd65aa0e3bff2e5c6e885318a704f7c39685cb5cfe3e6f76429326b64350cf0569fe63277bccd6ebb12dfcf6da6728ebf91b85fae733f126ad4323d7389cac1d8a1"}, 0xf4) 18:17:46 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x72, 0xc8, 0xc}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x1, 0x1f, 0x401, 0x1000, 0x3ff}}}}, 0x17) [ 740.462618] Bluetooth: hci6: Malformed Event: 0x02 [ 740.478039] Bluetooth: hci6: Malformed Event: 0x02 [ 740.493078] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 740.505039] Bluetooth: hci3: SCO packet for unknown connection handle 200 18:17:46 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 740.505588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 740.522527] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 740.524735] Bluetooth: hci3: SCO packet for unknown connection handle 200 18:17:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:17:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x7, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:46 executing program 3: syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{}, {0xffff, 0x9, 0x0, 0x6}}}, 0xfc) 18:17:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:17:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x6, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:46 executing program 7: sync() syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0200c02f002b0001000201040004000000040908000200ffff0703040010010400d00001200c16050000200101050a3f02000700"], 0x34) sync() syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 740.524794] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 740.823254] Bluetooth: hci3: Malformed Event: 0x02 [ 740.831581] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 740.998183] Bluetooth: hci6: ACL packet for unknown connection handle 0 18:17:57 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x3b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:57 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040207b4b62100000000"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:17:57 executing program 0: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf25010000000600010064240000050003000c000000060041004e24000005000300330000000500040003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x880) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x80, 0x4}, {0x0, 0x1}}}}, 0x11) 18:17:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080003007b74ef175057e7dd70db8dea78b192bbeeba04955630558aa55370c8ed44148f9aac8c0cf06634b223d52663852b17e19e3506f92c41a86927b1974167cf9410f18c0c828d9753e506314fb3f7f33e3d6da3ed924570b5c6cb70280bb83635c3c91ff601d74fe35a", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:17:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x8, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:57 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5f5f0f54528f283f5b00", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:17:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90086976bbb5d02bd62851a8abdb9ba25eb60c439618c407287a85ca2849aecc112e58e4b344eb4dc664305d64950723abb61776b8ec40ed328a2304abf7460d3cb772f610e7f469443258aceba94c3cd485dd9e85c5e864b41cac43ded98d66d4685d4b3ec51a2c8a2481ec538f75bdca2bcbe290c8b965f86ed4964de27aedfc4ef423a8a4bb61b"], 0x8a) 18:17:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x7, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 751.435750] Bluetooth: hci6: Malformed Event: 0x02 [ 751.444565] Bluetooth: hci6: Malformed Event: 0x02 18:17:57 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040207b40600e2610000"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:17:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:17:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000000240)={0x1164, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x57}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x794f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x1070, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9, 0x3, "419e382464"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9a812cf25560714cd3760087e99802273b1fa5c55e"}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1164}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='bridge_slave_0\x00') write$snapshot(0xffffffffffffffff, &(0x7f0000000100)="234a8e05f075b7a9dc445b2bdb2306c6c7d052bc3c0a7a8af8aaab6b71270bf7070c7298adcb4fbc28688bb7927d3cdf0ba720b1c08936d2dda6e50ef4479ccf9a1aaefc8dd11259bfdb7a", 0x4b) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x31, 0xa}, {0x7, 0x0, 0x7, 0x2, 0x80}}}}, 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x2, 0x100}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xff, 0xc9, @any, 0x1, 0x0, 0xd8, 0xffff, 0x1f33, 0x1}}}, 0x14) 18:17:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = dup2(r3, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r1, 0x409, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x44}, @void, @void}}, [""]}, 0x1c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 18:17:57 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x4c}, @l2cap_cid_signaling={{0x48}, [@l2cap_conf_rsp={{0x5, 0x1, 0x44}, {0x200, 0x401, 0x190f, [@l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0x7, 0x7, 0x400, 0xe}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x0, 0x9, 0x1, 0xffff}}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_flushto={0x2, 0x2, 0xfff}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xfb, 0x1, 0x2, 0x8, 0x8, 0xa}}]}}]}}, 0x51) 18:17:57 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 751.635677] Bluetooth: hci6: Malformed Event: 0x02 18:17:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x8, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 751.645366] Bluetooth: hci6: Malformed Event: 0x02 [ 751.747141] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 751.754057] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:17:57 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="66108cff00a817d844115cef501d83722c422e1e096f2abd6cc1673bcc525a5c02d0493d1683d720528dc0f244882a22018916cf77b5638aa0c4ee83068a00"/76], 0xa) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x110) syz_open_procfs(0xffffffffffffffff, 0x0) 18:17:57 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x73, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:57 executing program 3: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:17:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x29, 0x1f, &(0x7f0000000100), 0x4) signalfd(r4, &(0x7f0000000000)={[0x9]}, 0x8) dup2(r3, r0) [ 751.899377] Bluetooth: Unexpected continuation frame (len 267) [ 751.908603] Bluetooth: Unexpected continuation frame (len 267) 18:17:57 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x55}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4045}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r1) 18:17:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:17:57 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:17:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) r2 = dup(r1) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRESHEX=r0], 0xffffffffffffffee) r3 = syz_open_pts(r2, 0x40040) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1f) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000080)={&(0x7f0000000140)=""/92, 0x5c, 0x3, 0x3}) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x58}, "3db917f7d96200c20e5112fdd6b388484d6fbaa60f33e70dccef8cf49fb45f104009b5ac5c15573db0e27d59a9c4b7efec6722b9c26bbb0948e849f17bb804bdd8fb151b84f9b3f8214831be5fd19579289be313916fa055"}, 0x5c) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xb6c) close_range(r1, r5, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 18:18:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000f2d5799f", @ANYRES16=r5, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r9, @ANYBLOB="3b71cf09d3acf3d3697844446487b6d491474c8bfb47c7f4dabc9c1b778d38b742828a508e79d30078cdb7e7969cfa77149a5ca47153a3b15cb052a6f92417dc6e37e7d49b56c32d3fe8e738d284d8f4e7e4d183b5b3e42d7b17276964b761a5f72a2c39fd675a727b8614a77291f78f738faaa1c727a7804297734cfbad7b44c01e65d8f28ca92750f4e04401bf98e2fe8c5464f7b8bba87424eae481ae492a25a0b46823f8228210626c8347e7d305d69139fc6415bba8"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0400a9860000cb601797e7f3796757c65d8aeecae23a9a0bb9dfca115f1a80a86bab0f91304c83811977818900d6038fbff139971414b5ee451d2bea8eec840ad7ac07a988732bb8ad27305ef79554b5acaef267e7ffad6ef67f9b03c6634756f6831f39dd0124541d4ca5d734b67e6e0344b45b998592825a055d8f4b52161e98eeaea244ebef43a7e945a9", @ANYRES16=0x0, @ANYBLOB="000400000000000000000500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) r11 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r11, r0) 18:18:14 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xea}, "d7d2bbc619b53a8e5f2dde242debbd5204a148cf5ef0aaca26d7a6deb892b4ebb69f580222506f0fe51952ebd9cb6cd02aceb92ed0c7b60b616b63880981247c8d4eb509682201a36bab3e1c657f7e9c375236b44838bad69bcebf75a3bf7dafacb84c420c31e756718a995890c9cbf25271f0ae397f6cdc63cf31670ccdcd9b8a9ceab9b43047fdc6e999c2d39aa886b7fbaccdba767c533ed650c83cf8bcbec8233998cf406fca906a42bc54f3d034ef5d7d31059ae998bff1740e541bbda916e95ac9da670cbfb8db7aa15d16140659ed2ac70bec2d8a4c703d908dcb020174bf8b4f7316f546a453"}, 0xee) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "4dce8ce97ab5"}, 0xa) 18:18:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20040805) dup2(r3, r0) 18:18:14 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x10200, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x7, 0x0, 0x81, 0x0, 0x10001, 0x4000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x20, 0x7, 0xffffbfff, 0x5, 0x80000001, 0x2, 0x7, 0x0, 0xdb, 0x0, 0x5}, 0xffffffffffffffff, 0xd, r0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) lseek(r1, 0xff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x74cba3b8d9a9a866, 0xa0}, "85bd3bc6f20315ec9ec5e781533280d0bd9d89e3dbe0f96d92b4bfc288d30d9586538554ca23c4892f14cfffac578620040942cd80443135cef63555e00482616858363202923d28c3373aef5d68ee8fcc181158a15230de8ba44de41f3345d8d8aa6698a7f0e7e857f46bb9591436742619bb0f6403fb0f4f87bcebba59565b40a1a12da81587b84a39522839c7dd9e5910694ca3f111f4607baca3dbf54853"}, 0xa4) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x7, 0xa62}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x0, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x81, 0x2}, {0xabfd}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x25f, 0x7, 0x9, 0x6}}, @l2cap_move_chan_req={{0xe, 0xcb, 0x3}, {0x152, 0x83}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x3, 0x1ff}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xfff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1d, 0x2}}]}}, 0x46) 18:18:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x99, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:14 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:14 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x10b0}, @l2cap_cid_signaling={{0x10ac}, [@l2cap_conf_req={{0x4, 0x9, 0x16}, {0x7, 0x1f, [@l2cap_conf_efs={0x6, 0x10, {0x3f, 0x2, 0x101, 0x73, 0x7, 0x5}}]}}, @l2cap_info_rsp={{0xb, 0x7c, 0x1004}, {0x6, 0x823, "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"}}, @l2cap_conf_req={{0x4, 0x5, 0x30}, {0x9, 0xffff, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x3f, 0x6b, 0x11, 0xf8, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x3ff, 0x9f1, 0x80000000, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}, @l2cap_move_chan_cfm={{0x10, 0x40, 0x4}, {0x1000, 0x8}}, @l2cap_conf_rsp={{0x5, 0x7, 0x44}, {0x8, 0x4, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x1ea, 0x5, 0x98, 0xffffff81}}, @l2cap_conf_flushto={0x2, 0x2, 0x800}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x81, 0x7e, 0x2d6, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x0, 0x101, 0x40, 0x9, 0x1}}, @l2cap_conf_mtu={0x1, 0x2, 0x1}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x4}}]}}, 0x10b5) syz_emit_vhci(&(0x7f0000001240)=ANY=[@ANYBLOB="041817000000000000bb7069f8033894d788bba0ef800c41dd3f6ac9c5a425ef0c37a11e8a3a4fdd6f9ae1420636f4c7ca6a51ae61a2df5d243fa6725c5ad9a561a546f1ce117035fb3e5368b93e6a89ba906159c6f9c2a04d4451eebacc07483806904d644f5dc51e2174868b1950d9b4b6a1634c0cc1e36d364a0242b1e7455a98d450366d3b9af4b3223d7edc7acaee3ee827379c529c66bfcf12f85ebf05f3dc11f4bbd63487fd83dc3b42c5b2d2367c7599d72ce7f337f0a9a188522c21c323a051055e88a73c4e7e15b7a9cfb3340f518fbfe41ba60d11e997d276ff10842a"], 0x1a) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x2}}}}, 0xf) [ 769.048627] Bluetooth: hci6: Malformed Event: 0x02 [ 769.054093] Bluetooth: hci6: SCO packet for unknown connection handle 2150 [ 769.054307] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 769.056958] Bluetooth: hci6: Malformed Event: 0x02 [ 769.062837] Bluetooth: hci6: SCO packet for unknown connection handle 2150 [ 769.062916] Bluetooth: hci6: ACL packet for unknown connection handle 200 18:18:14 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x0, 0xff, 0x2, "dc1ee8", 0x3, 0x1}]}}}, 0x13) syz_open_procfs(0xffffffffffffffff, 0x0) 18:18:14 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, 0x0, 0x89, 0x80}}}, 0xc) 18:18:14 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x1}}}}, 0xf) 18:18:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xab, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:14 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 769.222008] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:18:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = dup2(r3, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x154, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0xa}, {0x5, 0x5}, {0x7, 0x8}, {0x4, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x6, 0x9}, {0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x9}, {0x7, 0xa}, {0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x3, 0x2}, {0x2, 0x9}, {}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x2}, {0x4, 0x2}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x1}, {0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x3, 0x8}, {0x2, 0x5}, {0x6, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x6, 0x7}, {0x2, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x8}, {0x3, 0x8}, {0x6, 0x8}, {0x2, 0x6}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x3}, {0x1, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8001, 0x3, 0x1000, 0x1, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x6, 0x18, 0x48, 0x30, 0x1b, 0x36, 0x60, 0x24, 0x12, 0x12, 0xb, 0x6a, 0x1b, 0x6, 0x5, 0x1b, 0x24, 0x65, 0x9]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x16, 0x36, 0x6c, 0x36, 0xb, 0xb, 0x3, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x400, 0x9, 0x7, 0x80, 0x7, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0xb]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x6}, {0x0, 0x4}, {0x2, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {}, {0x3, 0x2}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x6}, {0x2}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x2}, {0x4}, {0x5, 0x3}, {0x3, 0x1}, {0x6}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x6}, {0x5, 0x8}, {0x1}, {0x6, 0x3}]}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r12, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8010) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xc0, r13, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff9e66}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b2f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb6b1, @loopback, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24048001}, 0x40004) 18:18:25 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x7, 0x644, 0x1ff, 0x1, 0x9}}}}, 0x17) 18:18:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:18:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x300, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:25 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x4003) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x98}, 0x1, 0x0, 0x0, 0x4008051}, 0x200040d0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x0, r2, 0x301, 0x100002, 0x10000, {{0x5}, {@void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r11 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r11, r0) 18:18:25 executing program 7: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0b000000000000000100696024e4bf00000000000000005a7c1a0a5405be9f327638ad1544237cb37ef02d098f47ac38170a571c873c9ce078723c38832de559999235db7d374492d98c5e3fbb3d4485c3abc47d2cb027c3aabffe548d60140959036c7b3477a8f3fdd994af04106fd99429bda3791931508cdb5dbafdb114e32405cb16840bb74d1bff470a588189e53dbba383d34dd1ffb8a89d6c26"], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x6b}, @l2cap_cid_signaling={{0x67}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}, {0x4}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x1, 0x48}, {0x40, 0x6, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0xfff9, 0x8000, 0x9, 0x9d5}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x8, 0x8, 0xa00, 0x9, 0x2}}, @l2cap_conf_flushto={0x2, 0x2, 0x9c08}, @l2cap_conf_fcs={0x5, 0x1, 0x31f136767c346fa5}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x2, 0x1, 0x8, 0x1ff, 0x800}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}]}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x8, 0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0xca0}}]}}, 0x70) 18:18:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r9, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x174, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000840}, 0x24010840) r12 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_SET_PMK(r12, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="78608c4a", @ANYRES16=r1, @ANYBLOB="000825bd7000fbdbdf257b0000000a000600ffffffffffff00001400fe00013d64010ffcf785519489f10f48edb30a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff0000140002017264af6c59ab05bd6af54b607a0e9d140a0006000802110000010000"], 0x78}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) dup2(r12, r0) 18:18:25 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 779.871209] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 779.875607] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:18:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x500, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:25 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x1, 0x91}, "8dfaf0a29ecc46ba31b3e0ac0d30ba31e06b68f83a7756b54b84faa270bab2ff5101b798c1e6542b620c2fc62417650d6c35f26c6695d14157b2843c9608f2b8d86f11b1c6dc154dcc7977979e41bc1bf0a6ec70caade6c955cde7bf5585741beddb0532dd6159959998043471a2304b90ebb9ae33d94d99f65f1746aa3182af3d87874d16899c865ef8168e561c542b1f"}, 0x95) [ 779.993207] Bluetooth: hci3: SCO packet for unknown connection handle 1 18:18:25 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x300, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x500, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:37 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x600, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:37 executing program 7: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="f70107b4b600000000002c3aa48a0c679a2dfaddff8366d0abd43f4e563f5480381f78a6fff5901799ff772df5b671bf425460d4885ae19f22bf3f1af98a5c1c9b4010d4c4a21d91659e2f6f7420b08c21b89fe2fa43ac2740c8eb2255066bf850c8af0681d66018bdb4291c92141e5a90b54240540a277f35bb117aa72b32df877d0b84727af57c6e280689cd01f56f026d1961d0a76294406c6d9b19b583d89ed75b96e6e1879f659c7479a07e4c114e0474ef9d273b7131747fb95e05f4eaa71bb88601237c544d0f7439f7f79503972e02bf31e4630ac41e4117219f"], 0xa) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000801) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x3c}, @hci_ev_le_advertising_info={{}, {0x2, [{0x4, 0x1, @none, 0x13, "4929badb33f6a2219bc4070456b43ad23e0333", 0x3}, {0x2, 0x0, @any, 0x13, "de04a3509cd3b13440c91ce67ff0b692b79b1f", 0x7}]}}}}, 0x3f) 18:18:37 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x1b}, {0x6, 0x4, [{0xc8, 0x1, 0x400}, {0x159, 0x7, 0x1}, {0xc8, 0x1, 0x100}, {0xc8, 0x7, 0x9}]}}}, 0x1e) 18:18:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xe8, 0x5}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x24004000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:18:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x29, 0x1f, &(0x7f0000000100), 0x4) getpeername(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:18:37 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000100), 0x4) r0 = epoll_create1(0x80000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000001}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001200)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000200)={r2, 0x1000}) [ 779.994038] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 791.477364] audit: type=1400 audit(1756577917.115:14): avc: denied { block_suspend } for pid=7097 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 18:18:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x600, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x700, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0dcc6f", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="55e4c656f07ef7b421da4b2744"], 0x1c}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0x200000) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x240, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x75, 0x2f}}}}, [@NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x32, 0x0, 0x2, 0x16, 0xc, 0x12, 0x1b, 0x30, 0x3, 0x16, 0x24, 0xb, 0xb, 0x48, 0x30, 0xc, 0x6c, 0x48, 0x36, 0x6, 0x60, 0x2, 0x16, 0x60, 0x60, 0x6, 0x3, 0x16, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x2, 0x5, 0xdd8, 0x8, 0x20, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x30, 0x12, 0x6, 0x36, 0x6bfcc0b1481ea015, 0x5, 0x16, 0x30, 0xb, 0x24, 0x9, 0x12, 0x30, 0x18]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x6, 0xa}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {0x6, 0x6}, {0x4}, {0x7, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x7, 0x4}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x6}, {0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa2dc, 0x1, 0x7, 0x4, 0xb09, 0x5, 0xde1, 0x9]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x5, 0x2}, {}, {0x5, 0x7}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x3, 0x4}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x1b, 0x24, 0x60, 0x9, 0xb, 0x48, 0x3a, 0x36, 0x3, 0x16, 0x3, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x6, 0x3}, {0x4, 0x2}, {}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x4}, {0x6}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0xa}, {0x7}, {0x2, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x7}, {0x5, 0x5}, {0x3, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x4}, {}, {0x6, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x17}, {0x0, 0x8}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x4}, {0x5, 0x3}]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x80}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xfe}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf9}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x37}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff46}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x3a}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r5, r0) 18:18:37 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x301, 0x3, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x80000000, 0x37}}}}}, 0x20}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:18:48 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0xa69}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x4, 0x7, 0x9, 0x401}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x1, 0xc8, 0xc9, 0x3}}}, 0x8) 18:18:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x700, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip6gre0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x6, 0x1, 0x7f, 0xd34, 0x5c, @dev={0xfe, 0x80, '\x00', 0x17}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x480c39a93e616429, 0x3eeb, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000017c0)={'ip6_vti0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x2d, 0x3, 0x0, 0x8, 0x40, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80c7, 0x7fff, 0xffffffe0}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001800)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000001900)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x15c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x44885}, 0x801) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r12, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x0) r14 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0xffffffffffffff91) dup2(r14, r0) 18:18:48 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9, 0x10}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xed}, "35e3c412eea909b9a31e894c3573e7741256d5bea0113b0418bdb9ac22808502ff2b34223b2d1f175112869e7ee1412a92fb92b6fbc80207a65ebe8abddd073d7e7ee1b277de9d33a70916d42f581fc59270c45f9aace99408e0878666f4ba28985e3cbdc3b01e4618d289b87204a8ca233be4b7df6b5be146489521aec34bad801c5d06d5b93b6cd7a82909399a41155199f87fc33ca2482ed5a74b31af12a637250b685286bfc01f8bdb1ea5eba69a2f46b3de2e21d167d6a8f517ebd2110b0f18ddf2d4b96a50512489b4df26f4564f4335a226e7e826a023ef7332be701d1e49d7063a4f9b37b87ae040cc"}, 0xf1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x40, 0xc9, 0x6, 0x5, 0x0, 0x35}}}, 0xe) 18:18:48 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040207b4b6007a005a00"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:18:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x900, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:48 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 802.502544] Bluetooth: hci6: Malformed Event: 0x02 [ 802.518517] Bluetooth: hci6: Malformed Event: 0x02 18:18:48 executing program 3: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb64d6ea089db6320, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x6, 0x3, 0x1, 0x5]}, @SEG6_ATTR_SECRET={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:18:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x900, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xff2e, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="a50e0000", @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x404a0c5}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r2, r0) 18:18:48 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xec0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:48 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x1f, 0xb}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x3, 0xdb, 0x4}}}, 0xc) 18:18:48 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "db00dafeed88b68c2d4e649beefc738145a38fbeda2dce7b175e6d21af0daef5315fdb10c939ef0e5128c2d88805912532fc4c9d59b5c7a1a15fecd452f05245540f5d2ec40181c5967abb0b5e2eba541b3ea27fd25a17dad2e5f16ca9faf09268499087d790c5323db5bb0d56d916decc51bb5884ffadbcc5c438af0746c7c67b26d0a3f5f497deeaeb22881eb4791b66a172d2d390999259c1925244e80fbab1a78138422ebd99cb374d161258bfa67ea9fa2a93aa875cb944331ce7b66c5bda9265182563e5a2da0ca2c95a82dc89450b84088d9e84ae16c52f422fa61ca3e574a69b02b8cd65ebe8d57c07efc7a9b91326454bcbbc42a2ec088b1b1679d298f13369befd60f7b25392d2987e50a2a377c4e102433df15e6c5297fb984fe08e0cf7706ca09b92d4c5b5b9958d115246cd338d450a030cf5d018796b3fa1b197b006f61a7a7f633e173cec57b9c1fe19945eb36e1882bae50eed0500ef455454926b973643195a2f32b977df024bd8fb3cda4549ff885563e06143683879389e0c6bb5e3e11b49fcd599fc5224d72d65ab9544c3a680b89689ce1ccbcbdbb9e452c3c8d93e88e95a08c71329a500cc6fdbc3134d61894e4e0d77a22039d7f5628f23a155c6890edac4c8a696dc32da83e01b33191ad2e70ff46d7371bc171df5b2a69dbe1076226ec1e9079ec68cfe2a84da430f7b584bb2fc36d9f0f68cefe42b459bc40529c1368d932443a2189c4eed3f42def7f5578cb5eac0d558b03406ae3be3231a64dc29ccbfbda36178355aee6a25306af156758445183de78de17a9c509e6b8a181134b33e57cc8481a5302d13cf4df29888cb56d48846573a9cfef4924b3c24a5b00849a9dc0274708af7e35146c504bf31b89d5468848ef87c37d74da47f390ed97e25b9e949fa5eab35eaaac56aaa82bda8e9aaebeda4692c3dc2da5a46456b163352942d4a861ff7f787d19622f0195ace4c75710e19376915ff639aa41394c6030a1bcd7b3718a4461de8a8a003824fd31274cfec5ea3ae0154831027b0f9bdd3317d8c27ead87dbe6884792d57a3d0e300132eefad813ea6abbd1c72cd14238200134831b09c0b99df55d8454b62e2066aa97adaaffdf22eb30564a6c49acf632e7f4443b1e1f5408ab6c981a7c87ba1580eef63c0045eaa01896cddfdd0dc3e4a014d07059047f4a0e29b6928ccbafd3c3e5a6e455619976497d2cdade94adc5e286d0696f9de13c2d5948f7915041c5be1a5745154fe97ef53bee6609794f66e56e9f695e03e4a6b6492ae824603aa979e2429eaabf55b3be1c43fea0ec1d4e5d502a4afa283c09b764872c8ff50252158951c8fdb738a631f08d93c4b498d88c455745af132a5ef45ad9a2d69f7a7644e8305f46fb6b0b2d2cb89bc4c7f256c0fc6f4c38b085a969947b6a8699047a24d485703a4bdcf82315eb8b541fed8ab143cd3f079f01a6abf0b7dfb1b6331faa2338209a5fe9abd80ab9fcf5a3ca7ce103f570d8a81d34ae71f7f79acaac4d1a2f1015acfd7a7e62775d9f8c9363c8b5fadb5f0be2ee3844499e8354983d97423f14494f47572393ca6a193ea0347906082fc86e2a507d6a675cac2057600c61efdc5b6cbff8c4fa5f9aff3553ed0dc188406ed87afed01148429d7b60c183c8694d184775adb9a0ad01cc6937ab6e9ee6ba9ab90dc226f0b2fb7d873d917a96e1b59df4ca17752e6b26c1778089acefd5a098d1ad256dca9e50d986d03e6e1f148e36cd6290af293c4e6a807e71d604e977d639fa5a15b783d760c79f568d058fd6b5eefc8cb34f0df8d22bf9de3dbcf98cf77fa9b45a118544fd1100f4a4e1c22550a598eef7d05631e11c21e6d4cc71e6b9aaeec1c826521ae221e2d4e1b9efc9dfbbc8bd5575a0ecf78367fdc415ec9dbd9d88e402c6055cd7dc8ad3750b94f5a362f65daa0a0b766fd59cc83ecbd55a2e1a08d54c81281f10376f06df00b3b32fa7911590c3b4d3a649268a5800a61afa7ac0b89431827a0776ff797dfcb7b440b4b31b0776df282f9b3f55619898e9962cb6cfbbd3674f8e98191b6f5435cb100c42840ba41d8dca0234f37401674b253bd60644de6752c811b95637b7371ab5e8cb1c1aa9a8f45a52c63723ccbe7dec3ab20946e8541462cacb17ebc8578822959fbe1831fb72784cd4eda3ed3fcac0de1af63417d63a88c73e4be3b71ec27aaeb85ff64aaf2919a1a9d980ea3907c473dff7e352a9f9088096983bbd0cd12da515e9eef4eeeddfaa2449a5ee292bf290417226e9e11b739097d212a8ab6cc7f97a710718a180b0e7ba1584b8c8d3fd32749cf99ac1eb281608bc62620405f47df3a4ad574b2514c401ebf7d306349bc7b4c5b402bbac6e60e563a47710cbb7f7e54f2b1b8f21f6aaeab82f78c816b033a2eb5f5115528cb7d8d6a7a0bcd238dd73ea53763d707e2edc822177740e293a5cbffe7300b9ae1172315563edb2b7d524aaf0a46966981c0ec717cff7a5f330d7ab2d62ec367fcb145a0f8d19c6b561e86bb9e3fa108daa6639a6c272f2312067c6aecb2d6909b5ee5f7495a2ddcf9af59014af4e97b20950db3bb957a79427d4161a949b88bff9d007f895786fc537047f211f91148976f26cad1534e31b280f3ba172cc4fb56ef0b14f25b4df1aff1cf4c134e2c3376d6ec59f1c2592dc71bdc4929c6d9ea1b1ec6ef746ee298996216c7d4fccb3074a0ced88e448bda0d34fcbdaff623d46f798f395d7acd5f064850a3b54ffb33fd66ea9799114ce5930dbe805206866fe718e6fb3c47e6b79a6814cf56ac77538198017927d0adaec31b2c07b8b955db7ed35bb92e53a93b5ca4ffd83a356a702c4abca420b7ed82d889dc8dc831e70dd87957cb3df74485aa64bef120c8b0bd1bf1085f2a866afe37c21a44f113378b896b5d58dec9d92fe83b4736acc48f77b3ea95250dbd0c809a5913a6e8bf206b96b6f989262d41d806f43eecfc398f5db7630f3d4a71364aa77405b677533f3ef549ede2504ad5788aae6176d9ce5448c8a4ca49e7ef085bd25f5511c977f6b8a75b9527caddea04184d1a41f41b587304b9b6d49304eb29d598e04bf2748d5339de238aa85b57662c6bd2eb0b9ed41e76b413ed1cf03af6631d6bbf42c706353c7a8814224fddcc7d3b1e300b6b1194eb88703288c986badfe437ad7b755ff9b30c5e2799682ff58efe65027b6a0aa11b9c92d9e9929d66b6a8ff3f04f5fb517f838504152c736d012c7b8d46ba5052bc84fb4f57be6347bfd91ab40276f17c3ba85c836af7aaf8d6756851a8c81b1a79528e75d01fac6dd5b43b2f67b85f718fd700ec63e9e98ad2e4091ded7e29a22c83277589a18c74e580a6151bbfa08c0ffd03080fe6dd8c682e2fa4f5195c1ae558e35a0a7f6de87e07194d29b05fefa6ad9c13a314cb010a2c619f05b3f2174eb40e50bc44572c815aaec38baca7571105383f2c1a013f9a1d8bf24504bc25c25fa8f5ddf78d0ae62025e918d09a2a0e82c8064969e1e9e8336a7f0e6efb7d0b28d479d77c7da5e7598548f7e5552db2b178e5a16a61201df5ac0caa46a5d39a82e5ed6c25433c298bbc15f99f3f7a1babd6ef53b7f1a3af074cb58eff29f8b7691b1f156212077abfadce93cc2a386aa38037963d76feb0d3a971607ac972143c21845318a66d13037c210bfda499edd40bbcc87a5a0812d48c7564d1298cbc4b7b20a3516cc113af72d14fd48c021b834e646ccd2637d8a471c7decb7dbb7d185c2d8f79e5144f827220b72da5e58542b1c224e4ae5623c53dc612b92812da3cd2aad1b095655a1dd3495f261e89ce473e357efd1d5d20c047abfc1b095eba214383b16264a9b39fd402468542b26eb042f83fb36f18b84797ffb86c1862cfd9cbb0f551c4b4493d4433f60527a2d8a1509e57c18096f2029b79634f595ae668860be98c9437b9fe419f80379adeb1bd0c8d49c48b6fa8fc76c7b4cdbdb62e2f99f2df8dae55c11ac78e7d95356573407e3d6ef32f8f4398f0b839a56115c0dad508011df855e3e88125e6c0747d7f7364bbec820d356b7905f88b169fc0367fadf54e66e011b11214906b6023a80f4250904d17be6eee8f3cb88c9f27498617d3a523d015e611f358743ecf48b863da9bc7253971bb89b7d41ae9d2471e3714b782e2d051840a5ef4a47e712bb7e9da283693bb3a684a633bc0c888c84a0cf5bcc7d60b7103ddc7d5626b9da7195cbd2a526a8eefcdd7e343c91ca29f270a520b4d78ad9bed1fd194c0b0185cbe0f6bec6fc5c052cee0aadd49e6e81d7557e7f20de3aeed01f1a1c626260aa66b601fa8b226ebcc2e5444f087a33d5d5c3d5ab2ea84d6ce718fcee68f984ef7cb38f735e25cc17797882b99d5fd7812418e47b955b9ec9817e9c8e0e79e8fd214c739bf7673623d154b8ff42b6c8b930eff6560d1e02fbf36c1278fff97ca91ba6b0d6f01ad400a8f18fdc8a3909459da122a6165f35f1e392e9b5dd085b6d891ec074f69e399cfc5babb64b9ef07425cf5855eefdfcca685bf06d8e0188d6c35f343d080fc3cd9635997d45976a8fee70364fbcc88007d4d17bc358a95558ae4ce5a5a2994fd434aa74f8fb42ee8582531b8eab9cc4fa23f504a04fbf6c188256abc152f312703bfb35d97a77ad92a37fae215be1f5a26adecb3f43c700571ebbc951c700a000c0dc2384cc3413069608ca3a359158a9480ce2847370ce5efcc0d8053f29ef4ee86b827ce9ffbb0b1c6a403a82a332075c0d4cc5f90db241bebe2dfe6111639828b1985424436f7eab97d4d45a9030799f7148d2f7463066945cc0cf2a9956c9e673338ef44cc5480bfe904ff4f8f5b95cbaadf8c4538c5facc1a9167cf5822ef61d11e549775e6cc996cc2105086dcefb2ad3be04a796485c2d059404a72ed0112fec5fe64f6b74da2b5a1391fe6dc4e8a766d2840b999500d2953f548e3466f6bdc5375c12abc9f11fca2ff7efaaae3543effc4cd8376a1bbffcd8010f33d0b2cf62564eecd3ee0c039213ef7ff83ab0e1ea8021618a59113122319a97959c270112774bcc539507de1795cf37c7c04ead5989ab860e849c61db7f60de705586b6312f263daac0dfa1e18cdcb9f39e20e584de77eb7586fc13191726dea86ef566ab1164578f89a72d2d4eccac0043b732de0ab684fdc624ad925006b94cf36ee3b0514d2b1c162a7a07ef7778063dd2e3519c78793c420b8b71ee65c1006f31df744b589bd4b068814d4e721bcf139d92ab205f22748fa93d22c3883b3c4f23a42a2674cd50d738527302b21793124c23a8ec4962f8771b9b024a2e660f06c66873e11b9d4127462388ab9e9a8017f9d063a24fa78024d8b184b0be317c9709e0fa2b9b4d4c6d297415dbc5fdc99c3cb33cf057c7b3a74d3030aa23a34d8e704a5f30179be178c95780defa1a9f6a7da2d47b20912501e1fd83ba2f1f0bfc7ab39644cc8a0b80d7b7f0870c25d8a44a8b5680de92563d177b63447fef2a3f9956bf0f46258e18f69a3465092c81134db0a5eee864beae45708ef45f7cbcc12feac7aa3ed98b93cefee7d7f16f6294f0417833c20b8a18d6f27f370956c6fea965603b8c338448ac5bc60491a7c86c7c7ea56d491aed836e967fbe5fe5b3e7d535e6cf73bea110277e117d53c8b4dbb06c77116cb523f533f921adac08d189857fb29d290ebb0475bbdb0733142f5bc174614834a7fcfdf8ff4a05a120b976251bb5ad19ae1449bb94d289c92bf067b1edaf0ed32185988a2f082a72e4cdeacc2903234"}, 0x1004) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:18:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xec0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1f, &(0x7f0000000100), 0x4) fsync(r0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x9b, 0xc9, 0x5, 0x80, "975c9145ecaf9e9f"}}}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 18:18:57 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "f53f0aa49e35a572"}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x101e}, @l2cap_cid_signaling={{0x101a}, [@l2cap_info_rsp={{0xb, 0x7, 0x1004}, {0x5, 0x7, "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"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x800}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x8001, 0x4, 0x3, 0x4}}]}}, 0x1023) 18:18:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf00, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf00, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:57 executing program 2: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="d1fb70bd0fd601df8d18e18d466cf3c0693c3f76771f0c861050ccf6e5cc95d4824bbfae5d2f3007318d4e0300000000000000465ebbcd026a7269bbc2409b5242c7c717184838027d8b1b21166454b06786bd3477038e18822ccd8fe1a29c7f4a9f6ae4f2dabbc0c351ce392987abb9097378bf65ce7170f239"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x29, 0x1f, &(0x7f0000000100), 0x4) dup2(r3, r4) 18:18:57 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:57 executing program 0: syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xc) 18:18:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x20c00, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0000000000002f608ec297b37c17065e"]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x7ff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x80) 18:18:57 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB='D2\x00\x00\t\x00'], 0xc) 18:18:57 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:18:57 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) 18:18:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd28, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x140, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x51}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc39}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x140}}, 0x4) dup2(r3, r0) 18:18:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xab00, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:57 executing program 7: request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x01', 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:18:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9900, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:18:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="259d08002100f7dd0b95b4dd09d8217f1cd67ee3771bec755c753265a786a1129fb500dab2cfaf60035983d9bf57d75fd8d33e910218e4af5b1fb23db3b08b7c9af28d791491414187db2a16d9075e3a59ef35bfdb943d0261e9092bf6acf324becb76e4a25e2ee7841e6dc471787d0b118fc99c013e55", @ANYRES32=r2, @ANYBLOB="3db33a1d3470bec319f13ca464166f1f084caa0b875e4e7bfe8d85ec2b31184b3650184aab249f93266c630417c2ca0a7fba51a63eefcdc64ef7ccfc910d26bef47368736f9a8464a5629e7c155f29b9be204f93d0b97f8a1d9596a4b7d2bb4cc75f6b841c5102c38f037665a8a6d991fd3b64cf03a16b9d554da45f3073ecfcf6d2ae364474f879d628d115dbcdf1d6971e458d4d022e533657b3fb69b690c63ad173ef4a05f9993c008b4b432d693ce854588fc5bbf6728a00be61edec9e8ffd4a50fe9fb45c49a28979a0a59329b569f6fd1a6f51ebf3690d053171488fb5e07558b61b0467a7"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) dup2(r3, r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x40, 0x3, 0x6, 0x53, @local, @mcast2, 0x1, 0x7, 0x1, 0x9}}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000540)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}, 0x14) [ 812.015945] Bluetooth: hci6: Malformed Event: 0x02 18:18:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000700)=0x3, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) [ 812.055761] Bluetooth: hci6: Malformed Event: 0x02 18:19:05 executing program 3: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04020718446d0ef0ceb656ce914f1285c9dc5b57bdf102c825a8b810b95a2b39bfbb156be24e3a4dea8610bfe1935e29350ddac359e063897bcf441420a0b84da68a70d64be724ab7ee72b73936ba507c7acbb3e6905c37716695d94c29a32c65ff3d927e37ec665ffb54ad208a0db27284325290c29b9de9b8ed10b76b7e8ba4526159aed7d14207bfbf08c38390cae15102747e78a89229650d8d05dcae7c1282b87a57d62e214725b33cbe1d182e9397766616f9686b24bd33048711b8851177acdc31fb430b823"], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:19:05 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xc}, {0x9, 0xdb8, 0x7, 0x200, [0x101, 0x1000]}}}}, 0x19) 18:19:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="c15200ad6dad9e4349a78e98fdc9f49f73aec8f2b392b2a66c49d806db1233dd4698490f419cacb93ee5f9f3b4d394f918d149d3aa652eabf61af26c21fa210060f4d8711ccf17d4870ad21b5e94fe67cf2bf23b29f37fba155c7e3041999527e3229bcf1347e143c5e9f4ded5caabf0dc5ceb107a74ea7a7ddf77728b3ca58dce54382830c795aa00711579ee0fd9a0017c8a4b795dd2949e3b14547f1e97b4bfdd4be3b02623eced6383cddfbb0b7e0a67e7badb9bee"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r1, 0xa00, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="6bcf26ce3185"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "537fdb678eee1a9ceaf11980d9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b196e6297acb9924aaa981df2d"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "bfea9b81e82253"}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc804}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3ff, 0x52}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r7, r0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1a8, r8, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x160, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x4}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x6, 0x4, "82cc"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2a95a32a9f9f60debeeaeb33f0"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5c03d2880ad8a21dab3c15ea5c"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0fa02c174a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "037ca4bdf4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "6a882003"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a18a061d6c3e03c0784e566930"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "44bdf2a40a"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4040800}, 0xc811) 18:19:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x94, 0x0, 0x3, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a6d}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x28c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x94}}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d280cbd98d0c26efd494d62c2ee3c5e74fd6a4bcc9c8cdc43b15fb7c5cf0f69c4bf57f16ee638c2cd3a42e73c397824562a0a2de1dd4607ce2fe2549250879919bad304f12e5d2bedc078e3db52293680fc713cda44991dafc6aea7cfb560f04961f7500bbb8c094aac6ebd3badfff48c4817cd41b687d98dfee2a1ecd44f9e0dcaf1c078694b28c0325b22a9d134e6ab282eaef688f3525f801634fd8fd34c47d7ba64d", @ANYRES16=r2, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r8, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x167}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40084}, 0x10) dup2(r4, r0) 18:19:05 executing program 7: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'os2.', '@[/-\x00'}, &(0x7f0000000040)='[,\\#\x00', 0x5, 0x3) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:19:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xc00e, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xc00e, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:05 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 820.182425] Bluetooth: hci6: Malformed Event: 0x02 [ 820.187336] Bluetooth: hci6: Malformed Event: 0x02 [ 820.201319] Bluetooth: hci3: Malformed Event: 0x02 [ 820.207635] Bluetooth: hci3: Malformed Event: 0x02 18:19:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/217, 0xd9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:19:17 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:17 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) clone3(&(0x7f00000011c0)={0x2020880, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x29}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f00000000c0)=""/119, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) syz_open_procfs(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000001240)=ANY=[@ANYBLOB="010ab6f4a63efd3eeb"]) 18:19:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:17 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x401, 0xffff}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x3f, 0x1a}, {0x1, 0x2, 0x1000, 0x3, [0x9, 0x43, 0x3, 0x1, 0x2, 0x8, 0x8, 0xe0, 0x4]}}}}, 0x27) 18:19:17 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x824d, 0x9}}]}}, 0x11) 18:19:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="948d7bfb0059b0756c73dc135295cd07b7aa5d043c525e9a746be04f9cf50ed3b9ee0963050dfe4e59be87bd9d893f42d1fc0a39f30f8c4bf9a657bc1ad1c4595db44c5ef96587cc8bcabc5634a25400f878f8831aae0f3127b60af34dcf71a8a83d763c23803b510d21c6ad6f34f8c3b35df0"], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) [ 831.453631] Bluetooth: hci3: Malformed Event: 0x02 [ 831.454950] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 831.456314] Bluetooth: hci3: Malformed Event: 0x02 [ 831.459804] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 831.484660] Bluetooth: hci6: Malformed Event: 0x02 [ 831.493170] Bluetooth: hci6: Malformed Event: 0x02 18:19:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207b4b60000000000dcae8f2967c2719124c7a4aff09dc74dcd91ec65461037d7a04bd8226ef6450c03bc8d1b6f5f8f5fda2c11958b96eddde9d599190568c9c2c458d44922bb6642ee36b04ef964c6d15f39b386262b1968e3bd22bfd072485d70d12690deca88fde4bfe2c025203d29c09afb2d8714f50f842612cdb8c62ff64fc650525ecda9"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:19:17 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:17 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) 18:19:17 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x80000000]}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x80}}}, 0x4) 18:19:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x190, r4, 0x5, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbf92, 0x3}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xee, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x2}, {0x80, 0x7}, {0x1, 0x6}, {0x3f, 0x3}, {0xff, 0x4}, {0xff}, {0x3f, 0x3}], "9cb19bc370b18af7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x40, 0x1}, {0x5, 0x2}, {0x1f}, {0x40}, {0x9, 0x5}, {0x7f, 0x5}, {0x7, 0x2}, {0xff, 0x1}, {0x3, 0x3}, {0x80, 0x5}, {0x4, 0x2}, {0x1c, 0x7}], "88c978f3b3293e20"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x3, 0x6}, {0x1f, 0x4}, {0x5, 0x2}], "8c2f9f2ff5437157"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1}, {0x80, 0x6}, {0x0, 0x6}, {0x6, 0x2}, {0x3f, 0x4}, {0x1f, 0x7}], "2066fc70cf9c9018"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8f, 0x1}, {0x1, 0x5}, {0x9, 0x4}, {0x4, 0x7}, {0x7f, 0x7}, {}, {0x8}, {0x4e, 0x5}, {0x1, 0x5}, {0x20, 0x2}, {0x7}, {0x4, 0x7}, {0x0, 0x6}, {0xe0, 0x3}, {0x81, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x2}], "6e40727421ba720c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x1}, {0x5, 0x1}, {0x3d, 0x5}, {0x3, 0x2}, {0x6, 0x5}, {0xb, 0x4}, {0x7c, 0x5}], "9b8c5e89eec7385d"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xfb, 0x3}, {0x22, 0x1}, {0x1d, 0x6}, {0x6, 0x3}, {0xc1, 0x7}, {0x1f, 0x2}, {0x4, 0x4}, {0x60, 0x6}, {0x1, 0x6}, {0x80, 0x4}, {}, {0x7f, 0x1}, {0x5b, 0x5}, {0x80, 0x3}, {0x2, 0x2}, {0x20, 0x4}, {0x7, 0x4}, {0x7, 0x3}, {0x2, 0x3}, {0x80, 0x3}], "f28a95e715aa54c4"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x7, 0x6}, {0xff}, {0x9, 0x7}, {0x5}, {0x0, 0x6}, {0x9b, 0x1}, {0x2, 0x2}, {0x20, 0x1}, {0xf, 0x5}, {0x5e}, {0xec, 0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x81, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x81, 0x2}], "49b94e30f38b3a96"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9b, 0x3}, {0xc1, 0x6}, {0x10, 0x5}, {0x3f, 0x2}, {0x7}, {0x3f}, {0x5}], "6c4c36f8d6bf246e"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x4, 0x4}, {0x40, 0x5}, {0x2b, 0x7}, {0x0, 0x5}, {0x9, 0x1}, {0x51}, {0x8, 0x3}, {0x7, 0x4}, {0x1, 0x7}, {0x4}, {0x0, 0x4}, {0xff, 0x3}, {0x4, 0x6}], "602de1cf9f5da5e5"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = signalfd(r6, &(0x7f0000000000)={[0x8000]}, 0x8) dup2(r7, r0) 18:19:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x80000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 831.605387] Bluetooth: hci6: Malformed Event: 0x02 [ 831.614303] Bluetooth: hci6: Malformed Event: 0x02 18:19:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x80000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) 18:19:17 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x30}, "f8c04980ebe244bbe0a2ed5d757e28ecd1082f9edabdea5299f4742c6310529aa6d0183c174f3056ae2b7b14bd2ac3f5"}, 0x34) 18:19:17 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:17 executing program 3: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4d, 0xa}, {0x9, 0x8, 0x5, 0x7, 0x7ff}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x42}, "ed5f4bccc789396aadb7b1cc9b90d6fc8ff1b605635595a974b6df5f197f2d2b20add56d9d6f19c8b6552d9f4cdce84b8bb062df59d0bfdae5c2e7e7bae9f3a99729"}, 0x46) 18:19:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0ffff, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 831.827556] Bluetooth: hci6: Malformed Event: 0x02 18:19:17 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2282, &(0x7f0000000000)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c800180014000100010523047b99bab6217e001c00000000000009a3159e3dcd413313f79bab7c75aa3796373e676e2ae33e864298096831c5262f741d9dc0d6ef5683d3fbd9ee02113e21dcb79fb2894172ce0bcd4284e9bd182aa771ecbf1043f9680c3c1c0cbaffe84c5d83bdc99e7f644ee790faea1ae1ce9cab76603e4e022c4f270a6d3c4c471c8da555ccc6b54f944892a9e799b883bfab79bfa8d438ebf98c095f8c76fc8d25b94b5664036220150f54962ee4d6fc3480d4dd5067e5fdb468f35d7b11374103868febeef90db9"], 0x1d) [ 831.848070] Bluetooth: hci6: Malformed Event: 0x02 [ 831.975787] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/217, 0xd9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:19:28 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xd2, 0x2, 0x1, 0x5, 0x2, 0x8}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x1002}, {0x9, "657b971641513f3c6de6c7c72f920c524edc122498874698a14474c92569215cd7313fcc43e636f64772670ae0e374c71847221de96c8657e097518fa8ce828312d164ceae95bfb1ae1a24a9c4d31e4a0873f1bef23b7cda9701a2b07689e98ef9d61e47a026372a29dfac3e454cc1749bd57a5f4b8d0e7ab043acf81d685c20e9cd8de58329781828580013b6841098d580a931c16e7f9ea5d8a29e48db5b4288cd08a6b5e0eae44c4e5f36abd4ed90db15a3403725cc0a7fbfe31eb39a69cbf5c4576f5b43a228d4e39dae325deffcb8c23eb9442df893ecb8a280e7da6f407eddae2f36d0d231a336563353223dc34489a014f8a3b43cd9eb31b866cdafe7c2479a3fe403c08052c8415f7ce7ce76172b86772a3de1c074ec61057a5e075433e86729a6cab782451a5f9a21b0aba3e946a4fc7c40e51af52b59eec7feae109e7c4461899355907f6b2aa89fd51c311eeb4a16fb0b7c41a69f4e0f02b09e51b43b82408601ed772748ca49d454180767654704a1e95ab69c29cd0456528529989f51131901ae8c8bc2cace139bea884fddbfd7b93d4658bc3ef63de1f8b82390702c26a76ba615d5e44010c82c1ae18420d671d87a061a586aec1f0d9b2a7164d7ef92434864ede6365f95a7f40c38d7c206db58195cccd046d05cbe75565709f5df4a73441545f170756b1e673ebd270fd8994a179e6fdc19979581564e8cea4ff6dd6140c042e12fb8f86db561f8796b2f33f767c36cfa1270169768e15a8077b7fc74b8639b0ccb5064689a7416a9ca164bffa3ff3757236bc67f1f64149746c2b634be446baae01a52fb80bf5535953c27cf830f3161ce9800703c7681acb6018c673b47e9286d677ea10e02ec2ec65f1bc8cd9a8fbc9c11efb3f5b1ef38a7328aead8e0a1280434aee8ca199e71bbbd3a7fa0598f23dc52739d961ffd59b4ab6e6d78eef572e0e7ba11ff42c096822f1e6123463e177894b79ab2ba14b7a268779710a42ff904a8316ccf10c547de363a1f51c31431932f7cfe0414f60565a88904d0318425d05987e1cf0e2cd8b227a0b9f2e2bb1e940ebe477aa9c78a30b58d7935fbebbd3c5042696fe62aa28d902e022d4a3f01c44e6b93d78157bcd1da8b779a8f984f97c0a27387649a1dbe30fc2a6d4c4f53ae4c383fd7dbf3f458fa4d1cd2d4a36eae57bee8bce2a99d375bbb5ae8fa1e57db998020ab68819dcfd4202b900462faa32e14e83fb38ead322e2cca49fcbcd68973e1dca96336d495ef06e67f50e0aa1b36339f5f999a36dda4afcbcff2d5cd81f2fbad96dab71ab51c46ced531d9fa4e84f149bac73ee8a4caa77aeaba9594c1efe96baf51f7fc19c3b6204f9b6e86e1c1680bb2b9217affa70961f1c64159c709fe83f2f9a86598f2503ccedd4ed6fb624218e98c64d4c53c61c64b28edc21b0d3a7f9af29e9c04d8ce0c5f08b89f5fa5d7ea625c2ee861a18e087f4f5456aa5c5ede94e14a019120d377661b3176615af560a00f5819c2ac32a4d3665fde20f47f18c9df6d8ffc09a44140b33ebfc91a6b9f7e950202cdf14565bb41b1bc0644d8143749ccf89315bdfb1a2adc4e0fd4073682a4e1eccc03cb87effcfe746ab9c57cc99a3406642fa3e42de4088727eedb7c51c00d01ebe1efa9e5b7a80415e1b652037330e1f993d86d0f3b9cb6e7d4ee7c6cec104c57ddeccadd0792a8934ff42dbf3b74f4e93032e2c1d3e202fc3f91f86d9b80bd5b348b84bbde570b98d0755ebda2f1c8ac8992e14193ef468d75f1c99d906a6322d371f1955e012a286effd938e6e5197f34aadab5409aceaad61f3ac25a8921cc233af2529d1f3034163f89a47614d150d8399eacae4859fedcc92dee5a282837cb40243a7a4cc5a5de59f9759714bdc24cb002d6578c2f38a7d54e26f6b71fb69dc29723fbd1d2ce8761e549452033b85b6a7a61a7ffed0c48ae48fb61eb5a88c217ea455a2ca19c7b68deb7d960b2c6577a6516874c95340d2d4de063b7f236615910317d38b6d45f2eb25744b565fc38fec27d8826575bd4ca7335ac10683db5edc0682d92784f68f49ae4ed89e02077097cce3f0136d6a83834e14ee8a72216fa7bdf7eaa6c75dd1c3b5ca46f15ac621a0bd49c887241cb70d4f857d9ce6c5b5462d317607139892387a355ab208069a247226f5950ae19b8b9a176cf8ae326ae94944ad55cbe9342ce8bb957a2e48343898dc12401f29d22f142c6f0137859392a65ee070f62fd60bb2796bfc11b88080e0288514827e8f64386da6bdafa2412fb2bc41aa83d73276f40c592bcf885a9229fdc9a3078a571c341772d81d44663e9c9b5fda94a6a27422945637c7b5b397e0677d08efc91db08ed0ff3235ff9fb4dcc76656c89b325f72c4ef3b4fcdba299c36f3d01d13fffad485a468256419eba032e452c9b34e902bc02a4a47dfab008eb457ca24c569e773ec6d955e3ecfef879ccb36cf09c2401ce15544dd6c6fa2860e705d15b515a6dfb69a65bf79c0b00c37da09e54f81e73482839d26244c9649d70ce484527058f73b3a102fd6c337f4eb517ec9fa34778f5156ab9ba16096f68764dd19b508caf6a0b77b2d76f07fe67e5ccbcd267fbdf94348e9d9c0b3a7bbe5434958553c6fd4c91fae1958c799d6c03b279b727c12e2a6bf3eb0ea5fec73cc692c47f5cade9cacae65fdf3277fcc0bf0ccf47b82e163955497d5a0de41098120ffb861398159c526e9a48bb8073f9533c766c568b51a002cdb56f10fcd1a558a59e145f014cede46da952be72c59495420c88322449f3688dfeddc0bc0061021c5275497de463a75d2d6695e5f66318e7181db53455509f79a0ac5d52157fc662e8791de9056585088bae2fd62ca6989eda308904b2b1b1cea294f65e8889ead4fb731e6b5320589176885005319230e81db03ac2e97dfd93c27a06e901bf50ebee94d8d829c6debd8dcfb592e8ed12e2c2afb78be854da212415f27bdb9af0570e88423cf4376d03fbf9f16d0e931fc56d1ea8db6a52f8b17a4b37d49b0dc55361936fe063a5f9f6d611bc3a921211225058c12b39a3216dcbe222bc05bee4c0fe6c69a971dc2a68c2d7943849fe9f2171f9e6cfbfac5c13892350c982fc4a9b635f6399122b0bdcc8d9820c2795bf01e3113bce421180a0662ffbe011a12fc6bab1faf666c020ea624541a985b65eac67bc9c8ca62ac624d888a014eb6d34a6e3aaf9bd216543c2d899a8ab1f8be533eb9b9f141653583a046650c99a9be4996f1930364c0cf83324e332b062b7cf166f305c202756c5fd0e713859f1770ed235744fb101b0575377af79ff62ce73bcdb8bb9d9a63e1a2b9353cadef2d0f3e33d1309248751fa3519c020f33e583b8fab06a6b6841c7140653fc2550a7e61680b9523384f1df4faafe77eb7235025b2f305dbe7d6780fb3b0ed1b2ca2095fe3bda1e47095451ad4443be92124ea8aa1936668493ea56ac705cd1210f79e3334a7c4bfe31b51a73ea9169cee3685afc4528a2192c37d1ef6ea6dd74948ee28848040bf25990df8df7f99a7f8a1d1aefe0d72e01030bc0a9e447029514197c55a327a55b229f999616d9309130e3faaaa1339364a5e2433f932e8967a50773183474a9deb02fac1028cc3d8165e2fddf022a23d7929b49af711e49f331165d4218cb9ad4184cfb3f263a4562ebc095e26efeaa8a402a029f700d4018f7e28305b36f875bf3f2c47a5d9c32af6858b6fcd14c718bbd6381f9cc90f1fa97d282d3702ca72fad6ddade7c8b645f4e73a667f1946580db54cb1b775b6d08076733c1446cbdd04aeb4369d83667f0419b5ec2292752dccc56f663ee937b6c5bc15429929d5a25c80aba865c0f63a20a31664a0524f9f2a3613022189e0eb37fcfcd91058c26b8437bc74f508a7a86a5c5a1079dc416bf9c9ba7ac3c2a255acb68592ac6b761c51ec5a24cc76d9a97350e1b936531849145e850c2284be5d8b1059da0e0a77d248756900fbd3b4f5bd10107814958219e0fd829a273188a4eab88df598a21c98a43a4a9efd3c528e25e970123bdd2946546b4bf48b7b03b9429cf0b041d0e9a8ca0a46630291a880201a645c1bf7d60d8b1298664c0c2a8cc4926a24dfe644fe64c8cf6c4380fcc081614c3f9d675eeb9a509cdabc59000f366bf50d9bf368f859bd0c9f2867eeb5334eea30179fffa58343c8dfc9f14d4572d50d9829369b99b41ebfa580ff092af51ef7a4eea0d08b2779f1eb0ea5834c459f057e6f367688ef482b0eb20907980e8821aecd1634aa41fd477024e224d34a74bb3dce1ac1b1013ee48fbefeacc37a9641272512d4c05af657222a9988e9a011831660fb13fc656505c3b53921ad9411bf1e2d982b0a96c59360eb69abfe3dab3895f95555a8b2edf5621ac1d88045bc668c020b822cc96044e9e36d66a3d0bdaeca44b633dc6f4d04ad621f8417c781469bc47b063306ef3d3f96eb2723d1984ce8a36695c11086d49bf30fe440eaf3705a478124be281962c77d28202fd2e6356dcc5614a0706a048f3d61af2fcc40c91bfc869c0cfaf9e6049ffd697d345c7f45671014bee5b08b6eb98c1b44cbfd44dbadf14e5770ed3d5c6e901eb3a81d4b2ea6b812cb620427d9b3c4ea77337f058597b68e833e3bf9e28368d9870f81c436f599f43958f533e5f38b6128edff60ddcf43478e7771a52378f6b5717f8fd8da51fab53040069fbde321d3a88db7752469b09b3d337868274c962459a990ead076f004af42533a89699311155a97bcb2713ac04e716d68b925bc168536cb4e13f77928d3192485105fbc17daf3b277e51e5d00473bf55a2731207c1027205c55a53c4e4ea870ef39134ae0e533e111617d267f76be9321fccc7bb3cff878e908fd631ac9f873b75f04cfb7461842f9714bf69c680bbb5e8f0a411af1ccbcf00aece52e6717405de995487e899898b89a3d3d1da0d17d16d77ae319e0d6352223c2f1efb21f405981dd6b50a014f45de89504a4ad1bffdee432b4d421e2298ca17800aee7414bdb224a721e0cd6f9b2dcd5f53f787d21d5fcd641d1d3fefb988a146bddfcac371626228221aa8f7733c67a2286dcaa32f1ad63666d18479236e55adf398a855e871a30542e32e1cb3fb8e7ab9a46ad8ac35e6b8e665c8916d58acd33ecc28d55fc27b7d180911c77f27425cc3982ca7146afaae7a5b7eb77c8d7e0315a65ad41b8106152cd1121e73e89eed046e4143cd0dba3be491d916c770ab6d3ce3264b4f63bbda5fcf98b5f04eb147f90e3293d5c9bcd6a738803c70d3d277ed20cb61068c1af8f59e2731358b586f21934565480f3d4bd6b4f22e5805b01d2fe2e26a61809e75f2304d3469069a5e7b017cb8207d7a9fe9a22874a622a3faaa414171f8e1c46e1e4a061ab458928150da9e1284f7a20b3f05268553e19eceab42428088f8e89f2859cd142d6457b62c34eeae99385b64135c9c8dba5d97f8dede9e1d10ba5724edea1984d17ce9ce86377c67f410a830adc3db4a6013551dbe4f23ce06fb6eacdb7545ceaf4a4ce15c163333379741d6c430020f552446fdbfc7a89692f2ad17e90326f619b31887c6f8dde166805a685ac77a20cb7b579f28089374ec53a6eb4d4a3b54d1ee8457722409fcc6d1bf8d42b33c4da72fc653c53aa07ae4dbc57e445673a7aac2b9b27c60d0110389ae12c9f8102cf68fdf1d441c2a4468d943eb4a29e313446fe818048bdc148a2e5859a2e1c7cbd4f8dcdbfb0a88a83e10ba76144b36580bbae20dc13b0cf76af995e"}}}, 0x1005) 18:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x29, 0x1f, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup2(r4, r0) 18:19:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0ffff, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:28 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="ddffff41ff"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:19:28 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x1000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r4, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r6, 0x5323, 0x0) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0xaa, r0, &(0x7f0000000000)="312f25bec9b046c2fc82f5c36408851bdfc982c2b3fae0aa91d8670055a33318b867", 0x22, 0x100000000, 0x0, 0x0, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f00000002c0)="ea651a7d0bfc3e6439402ac810c67cf853b62fcf2d89af91204c7c657f6f32408cc32cc3f2e2368ab7aa854f779d7c2ad50c269e6a64f1bdcb6037be19d51cad4316f384a0abc159ddafb2943d815775081a7611938d872dd1c9d639e456c222c8c43a768a8b6d8cea4ed475ed06d0a24b0261c8af83e2b8b68d3ded7ab32d2803af855bc77a4068a76260af473cd01c13fb849c16", 0x95, 0x5, 0x0, 0x2}]) dup2(r3, r0) 18:19:28 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:28 executing program 7: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x254, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x480}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe925}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x468, @empty, 0xe82}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20048080}, 0x1) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x134, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) syz_open_procfs(0xffffffffffffffff, 0x0) 18:19:28 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043209aaaaaaaaaa00000900be25"], 0xc) 18:19:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x1000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/217, 0xd9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) [ 842.755803] Bluetooth: hci6: Malformed Event: 0x02 18:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x480d0}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x2, 0xf7, 0x800, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x8, 0xb6f7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r9, r0) 18:19:28 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x10, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 842.905703] Bluetooth: hci6: Malformed Event: 0x02 18:19:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/217, 0xd9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:19:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xc) 18:19:39 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xb6b4}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) 18:19:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x3000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5f8, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6ff1, 0xf}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b9, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x40}, @broadcast, @device_a, @random="7edeb142ee44", {0xd, 0x3}}, @ver_80211n={0x0, 0x8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1e16, @default, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x5, 0x1}, {0x48, 0x1}]}, @val={0x3, 0x1, 0xac}, @void, @val={0x6, 0x2, 0x800}, @void, @val={0x25, 0x3, {0x1, 0x7c, 0x40}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0xe5, "dca753229da012094d690d4d650038ca34c1306583c682ded99b906111e8e46c74ba17d2ba3bcf9929665bbd098cb7020333bb680bdb281c9b9b7e56a7fbd0e1a60b07840bd59a96ff571c04512606116f91369ea653caa022af7a0df100b1c39763b68c42a9724e1cd106aac3b5ca01eae1d8d8507cd280e6e522eb39f54239d7e1a4ff2ce780d91edbb46c915fd44d62e940da1b1aa61b4e708935f319d5cd04ba55281dc381a892e4c713412177115ba55ad0d18cc8653feb15949ed64d806ceb7b0cbbdbcb07f97064eb6dfe9e4052eb0e33effe4812ce4d58699a9cd324484d7e884b"}, {0xdd, 0xe0, "1354bceedff0addc017aae69579c260c87853109668fef3e76ee94a4b13f625f5e3a0636e2eb3a707738710a059380fd674a5b383ffe30352c1396e4be59df053b9d975e2e1b1b1c635ac56b3b8faaf299be12a28fb1a50fa1f15dd5077cf2e5cbc7694348925e270b9d1f1b376c5bfe82a2a55c838458af31058a0296f5cc32399ff5551222f8e4528e4f49939b45be4239dff55a11a4480e810bc49165ac94022f3b4cfe3ff18424f1d49878d9b6d0f3d81cd396e3affac98e00085d183092e78e3e39307497b37f47a89904aa8103d07fc249522e7b1f7ce6bda5d2a5c8d8"}, {0xdd, 0x32, "817b405960b019b9b7d874bd875107fca242a83f7bd58066c97b392473985d43ad376faf4a2ed0e362a800572e51b3ec8584"}, {0xdd, 0x73, "6e8549e7f6737708d53f722974c0d6c6f6f1447092b568935d53bdbfeaad6cf56e3f58d695d2b63087981ef58dc4bd3a72116b87fd7011d7ea2c62b9fc2da64c1ef60c96883bb6dccb9e7e060ff3a9528859bbd292afd161e3bf5214cbfaa43bcf5fbfbcbc4976a86890ef0b5cbc4e8c71616a"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x128, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6e, 0x2, "60098563346f259ef6e9821113a77bcaea17a0ba81482f8186e247cf21988f2c75e06d1270b5280fdc6df99cf41f8bff2ca65b28b95341629c2f39e1382f1636d4ea4276f99ed5d72a86ff1c30660054bf0e22a526aebd9d52a376bd7930415519e69e584ddb6305738e"}, @NL80211_FTM_RESP_ATTR_LCI={0x1a, 0x2, "5b82e3225573e4219336c60c3cb40583f800262aa9ea"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x78, 0x2, "bed8b7f3ead41000c24143b272fd004b5dbc6203c13f2abe89eebee17c7347d5dde4847de002b99261e90587f09ab7fa6fd2252ca61a42aaaa09a8c6cc5f6433af473d61fda7e496ff3220411cfe6d12f50f2f9ceaf634ff056b1b734169c5503c47ddf3c3c92f0a8df27aa007462967a71d1044"}, @NL80211_FTM_RESP_ATTR_LCI={0x18, 0x2, "f3c864d69c992f55ce2d3840869b2721b599d9a0"}]}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xaa, 0x3, "f62c35ae47ac4dc910f257cd6b60f2524c25241501c29c285af2f237b7af5232c68bbd6680678588353cd8b5cc8498a3653fe80c195173ce3928def9e950e368419d2116ed91bf552940b47fd90a71b112bf2f641eb99a14b43c02225bc3aa5ec0bcfbad1cfdaaa82e796ad662195c231b3b7c5c6e28c03c97531e5e6b4f515922f15d6c2ad67409e50e69ff6381d3fd04c33f4745ee80f9507ce2c08d392842ac17d56a5343"}]}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xfe, 0x80, [@dsss={0x3, 0x1, 0xb2}, @random_vendor={0xdd, 0xf5, "fad95bcb17fe97066dcf7612b957f3c7c7648c0c8f4399797e073ca71f255dc9a532e9d5fa5ed7500b216dac3f4f79457aaa0f54ab32a264f4830c61ad8fc919e1c68cf56b03f6c371788347d9c71c40debe878f24cadb70cf28bcf33ef5a6e1a065f51e7005cabaf75bdace9e4f96ac4be109d223b90bf51668a964dc31200400d1ca97f65aa3300a525090edd2a765d09dbf5c0b79e15467f69e9e5294a5e28dd7f2cf985f73a4460350945c62368c891c903c6b90cde6ea54f17101e10dca8963467652c82ec2e54814dd8d6599ca9f68d99ac92910d56c349e75f7544665f7b19acd6b796d613db13da045d39bb0794241832b"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1a, 0x7f, [@random_vendor={0xdd, 0xa, "dee6b0789b1086d9eedf"}, @supported_rates={0x1, 0x8, [{0x36}, {0x36, 0x1}, {0x12}, {0x16}, {0x16, 0x1}, {0x4}, {0x16}, {0x5}]}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5f8}}, 0x40) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYBLOB="010300000000000000000500000008000300", @ANYRES32=r1, @ANYBLOB="fef0327a059357497039b898b1e61cce321ec645b51a534c41294fdcd8f95702c94ab661166354efba79485c90af74616f7a1dc1e50ba3a78fc2ba22201d605e3238fb1983c3b2f24ff47400000000"], 0x1c}}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10120}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x54}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008000}, 0x240000c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) dup2(r6, r0) 18:19:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) dup2(r0, r0) 18:19:39 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 854.199027] Bluetooth: hci6: Malformed Event: 0x02 [ 854.221595] Bluetooth: hci6: Malformed Event: 0x02 18:19:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:39 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast=0x1000000}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:39 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_set_reserved_lt_addr={{0x1}, {0x9, 0x2}}}}, 0x8) 18:19:39 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "f53f0aa49e35a572"}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x101e}, @l2cap_cid_signaling={{0x101a}, [@l2cap_info_rsp={{0xb, 0x7, 0x1004}, {0x5, 0x7, "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"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x800}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x8001, 0x4, 0x3, 0x4}}]}}, 0x1023) 18:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0020000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2c57, 0x6e}}}}}, 0x28}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r5, r0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x301, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) 18:19:40 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040207b4dde2709a24380e6da91ff7284eb60000000000"], 0xa) syz_open_procfs(0xffffffffffffffff, 0x0) 18:19:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x5000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x3000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 854.456596] Bluetooth: hci6: Malformed Event: 0x02 [ 854.464497] Bluetooth: hci6: Malformed Event: 0x02 18:19:40 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast=0xfffffff5}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:40 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x1, 0x91}, "8dfaf0a29ecc46ba31b3e0ac0d30ba31e06b68f83a7756b54b84faa270bab2ff5101b798c1e6542b620c2fc62417650d6c35f26c6695d14157b2843c9608f2b8d86f11b1c6dc154dcc7977979e41bc1bf0a6ec70caade6c955cde7bf5585741beddb0532dd6159959998043471a2304b90ebb9ae33d94d99f65f1746aa3182af3d87874d16899c865ef8168e561c542b1f"}, 0x95) 18:19:50 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x1, 0x91}, "8dfaf0a29ecc46ba31b3e0ac0d30ba31e06b68f83a7756b54b84faa270bab2ff5101b798c1e6542b620c2fc62417650d6c35f26c6695d14157b2843c9608f2b8d86f11b1c6dc154dcc7977979e41bc1bf0a6ec70caade6c955cde7bf5585741beddb0532dd6159959998043471a2304b90ebb9ae33d94d99f65f1746aa3182af3d87874d16899c865ef8168e561c542b1f"}, 0x95) 18:19:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:50 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043209aaaaaaaaaae3ff070013faad31c8d511"], 0xc) 18:19:50 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast=0xfffffff8}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x6000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:50 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "f53f0aa49e35a572"}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x101e}, @l2cap_cid_signaling={{0x101a}, [@l2cap_info_rsp={{0xb, 0x7, 0x1004}, {0x5, 0x7, "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"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x800}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x8001, 0x4, 0x3, 0x4}}]}}, 0x1023) 18:19:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r4 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000140)=0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8050) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xcc, r1, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x90, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "309e8529ca60528be9cba59d3a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fd77e9d9bc0cf703aceac128e0"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4833a632b7"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "479dcd8cf21ea8491aaf3998dc"}, @NL80211_KEY_IDX={0x5}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000010}, 0x40041) dup2(r3, r0) 18:19:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r6}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x60b}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x100, 0x2, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) dup2(r7, r0) [ 854.627331] Bluetooth: hci6: SCO packet for unknown connection handle 1 18:19:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x5000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:50 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x1, 0x91}, "8dfaf0a29ecc46ba31b3e0ac0d30ba31e06b68f83a7756b54b84faa270bab2ff5101b798c1e6542b620c2fc62417650d6c35f26c6695d14157b2843c9608f2b8d86f11b1c6dc154dcc7977979e41bc1bf0a6ec70caade6c955cde7bf5585741beddb0532dd6159959998043471a2304b90ebb9ae33d94d99f65f1746aa3182af3d87874d16899c865ef8168e561c542b1f"}, 0x95) 18:19:50 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) fstatfs(r0, &(0x7f00000000c0)=""/159) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:19:50 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 865.153350] Bluetooth: hci6: SCO packet for unknown connection handle 1 18:19:50 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "f53f0aa49e35a572"}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x101e}, @l2cap_cid_signaling={{0x101a}, [@l2cap_info_rsp={{0xb, 0x7, 0x1004}, {0x5, 0x7, "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"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x800}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x8001, 0x4, 0x3, 0x4}}]}}, 0x1023) 18:19:50 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x25dfdbff, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc051) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x0, @local}}) dup2(r3, r0) 18:19:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x7000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:50 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) 18:19:59 executing program 0: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='logon\x00', 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000000)=""/116) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:19:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x6000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:19:59 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "f53f0aa49e35a572"}}}, 0x11) 18:19:59 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) 18:19:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r9, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xa6, 0x3, 0x3, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb7, 0x8000, 0x3, 0x9}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x108, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaad3b9f1972b4618}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r13 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r13, r0) 18:19:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xf4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdd0d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb97}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x79}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}]}, 0xf4}}, 0x200040c1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r3, r0) 18:19:59 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x2, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:19:59 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x3, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:20:00 executing program 0: move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @any, "fc203ee7d06c10af17a6dbf3b1cc121cc23e6df38008757f6ec2deb57c6aa2a067377e5872f8273aef6bd3f9fc562dcf0fdd2c08deae1d2c3b5953de9978b8208ae06edf2f25dd73e3de7438cd742e70b5a436136c344317167a4406750e82b198fe7f2a6d48ad2fa601dd946ce20f0f10923079853cfdfbbd73c51948874a782f7534300b927a34da09cc846b8bb7c0c61e9926dfcd20f6d2484fc1efa4c4b091e5262b87812a918473f4915279dfd27c35b6b45894ee7d0e9f6007aa8833a37792bb8224c3279d5a0af300eadaf9d2198bc83946162bb3f911664b2e1b06ff719945cd1f94b46bfe739713f9face9fce6298b22463f2ef"}}}, 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x8, 0x2}}}, 0x7) 18:20:00 executing program 3: 18:20:10 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x4, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:20:10 executing program 3: 18:20:10 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:20:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:20:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000014000006c85309a", @ANYRES32=r0, @ANYBLOB=';\r\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x504, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000844) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) dup2(r4, r0) 18:20:10 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x6, 0xc8}}}, 0x6) 18:20:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x7000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:20:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r4, @ANYBLOB="000427bd7000fddbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4044}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r10 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r11 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x500, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x11c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x58d5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6ee}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x11c}}, 0x20004825) dup2(r10, r0) 18:20:10 executing program 3: 18:20:10 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) 18:20:10 executing program 7: 18:20:10 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x5, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:20:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:20:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x99000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:20:11 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r2, 0x5323, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000100)={r2, r3, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10000, 0x59}}}}}, 0x28}}, 0x4) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r8 = dup2(r7, r4) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000040), 0x2) 18:20:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x6, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 18:20:11 executing program 3: syz_emit_vhci(0x0, 0x0) 18:20:11 executing program 7: 18:20:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf000000, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:20:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x50}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048199}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x29, 0x1f, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000500)=""/175, 0xaf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed, 0x0, 0x9}}}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xbf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000000300)=""/152, 0x98) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r7, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x8001) 18:20:11 executing program 3: syz_emit_vhci(0x0, 0x0) 18:20:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x7, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 865.254973] Bluetooth: hci6: SCO packet for unknown connection handle 1 [ 889.199768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 889.207556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 889.210558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 889.214935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 889.217512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 891.292310] Bluetooth: hci1: command tx timeout [ 893.340339] Bluetooth: hci1: command tx timeout [ 895.388289] Bluetooth: hci1: command tx timeout [ 896.924388] unregister_netdevice: waiting for wlan1 to become free. Usage count = -16 [ 897.436342] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 18:20:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1c760 RBP=ffffffff85c1c760 RSP=ffff8880096177e0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003be53 R11=00000000000087bc R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff8880096178c8 RIP=ffffffff8151dc57 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fefdd7c06f4 CR3=000000000dfea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000100000000000000000 XMM04=00007fb6ba54310000007fb6ba543140 XMM05=0000000000000000a0db04bf279f6800 XMM06=00007fb6ba5431400000000000000000 XMM07=00000000000000000000000000000000 XMM08=36333d7974696c696261706163202230 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000b74b000 RBX=000000000b74b000 RCX=ffffffff8254963a RDX=000000000001c064 RSI=ffffffff82549648 RDI=0000000000000007 RBP=ffff88800a9d0000 RSP=ffff88800f237248 R8 =0000000000000000 R9 =fffffbfff0c8758a R10=000000000001c064 R11=0000000000000001 R12=000000000001c064 R13=ffff88800a9d01a0 R14=ffff88800a9d0098 R15=ffffffff860d0540 RIP=ffffffff8254964e RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe2209a82d0 CR3=000000000b99a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=0000000000000000347949a80a5b1ebe XMM02=00000000000000000000000000000000 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=50707d9a8112702a0000000000141cb0 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=5d1e524d30174ee100000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00002000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000