899ced1b0179c0049d92f06de51997f488e660180c83fd1528faf087beac41e06eb898dd521dafebac427b5bf5f0230f5af8b2c072b91aa23b1e701205000000e95af7adffb45ac45c858f30fba1c1cc64b3565d02f06ea1ea99b537146e69ca0598dc4fb87b0000d5c40b2f8d0846ecf3aad6314f83ecd17d9556c83df15a0ea11370518b0df5b57fbbbee0ae724904b213c18911bb344f4be90314e14d71922eb8dd6132df88c932a5e21e6198612bd1619f57e01089849c73981c79cb21efe8a3a139b926b9f4422cdb9df69a", @ANYRES32=0xee00, @ANYRES32=r6, @ANYRES32=r5], 0x85) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000100), 0x4) sendmsg$unix(r2, &(0x7f0000000b00)={&(0x7f0000000280)=@abs={0xb4e2bb09ecb05aa5, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000300)="a1d8350477de59690edf7747473da4d64e5c1d78604aaa381a01a6daec880ffd422f8d6e2014d5b7ec810a68ed2d1c7b3fc78555ead8bf36f69e67160d5a4800162a3f54f60212e91855afa3edf6cd345ee596", 0x53}, {&(0x7f0000000380)="03f67330162e233ef71a4eefcb2b684ef6776fddded617c99ebc5f40f7f725651f7b006a048cfd002d69124d451ae09bafc0684b98f6843bc6d2048829cdada1575a028fa6d17ca5f1bc6c3df9e0099f0a54f7d6b1e90211b190eb15d976142db7647f339232a65bc2f9dab6f4f64fbf5f4d627fcf724ce0e9f59a804ecc24d4", 0x80}, {&(0x7f0000000400)="caa574ec158e83dae1d9e6962cd001c6c246be9f09518744019dfb291281b259b0aaaf8fe625dbc72f681c9f83556009ea160c0ae649d681eb59365b01d1d64e2859772fa49509dd7ca1ffc7dbd6baf64431c20d09379bc508c15bd1474afbd5717dcc17fa39f6bfdd18bcd3f0ba14bbafa991851ebd0f019cf8164497bde2316258f96a0857f9360fa873b10be58d6767d987103ef6f1e86e84dbf0d229c1104856cdf14ebe46f52d071f7fd50f3a14ed939016da331d7c53784a06882857a2318f8588eec329bd6c7dc0d3", 0xcc}, {&(0x7f0000000500)="9811dcceed0485b31d873d709bf449a2ef9df41bb439a517168eccc4d8a8fd1b7a4a990e9700ea762a61518cc07447c711bb933757f05365726d39b0018dd79f8e590690d683a865ad72fb7186dfb03bdf0d317e9685105ffc3b14cd4fde7cb5407f19bc96dec4e2f92122f8fb59771955ea7504261c51175e3b279f08e1f403cd492f8bf899c59a3d4808062dafde62a71eeec3932b7feb16d6cdcfe9430195a04d167426615d974ce7cdd20fecaa7e1800a40db4f7715ee736a16ff49e00cbc1a9a9a0370fdea655538708bd5b43008f0e42c50f203b382075dda4efc58915421bb143fa0dc9fd0e7a83f1f83f0c06d97b", 0xf2}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYBLOB="000000001000000000000000011d000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r7], 0xe0, 0xc0}, 0x20048800) sendmmsg$unix(r2, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) recvfrom$unix(r2, &(0x7f0000000000)=""/32, 0x20, 0x100, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r8, &(0x7f0000000180)=""/119, 0x10) connect$unix(r8, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 02:32:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:32:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201}, 0x14}}, 0x0) [ 312.472431] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 312.475874] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 312.477279] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 312.479250] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 312.483474] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:32:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000100)='./file2\x00') chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 02:32:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100), 0x4) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000002c0)=""/4096, &(0x7f00000000c0)=0x1000) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = dup3(r2, r1, 0x80000) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000200)=@req3={0x4, 0x4, 0x2, 0x9, 0x1, 0x5}, 0x1c) flistxattr(r3, &(0x7f0000000180)=""/119, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'vcan0\x00'}) 02:32:53 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:32:53 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) 02:32:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) bind$inet6(r7, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) [ 312.682477] perf: interrupt took too long (4112 > 4086), lowering kernel.perf_event_max_sample_rate to 48000 [ 312.684024] perf: interrupt took too long (4112 > 4086), lowering kernel.perf_event_max_sample_rate to 48000 02:32:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201}, 0x14}}, 0x0) [ 312.705746] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 312.707194] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 312.714249] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 312.720248] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 312.721750] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:32:54 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:32:54 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 312.899143] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 312.902251] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 312.905106] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 312.906247] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 312.908540] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:04 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:04 executing program 4: prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) epoll_create(0x8000) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 02:33:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 1) 02:33:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) bind$inet6(r7, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:33:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000003680)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000004680), &(0x7f00000046c0)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000003640)={0x0, @aes128}) fallocate(r2, 0x40, 0x5ac4, 0x80) clock_getres(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000034c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/169, 0xa9}, {&(0x7f00000011c0)=""/80, 0x50}, {&(0x7f0000001240)=""/167, 0xa7}, {&(0x7f0000001300)=""/68, 0x44}], 0x5, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/181, 0xb5}, {&(0x7f0000001600)=""/171, 0xab}], 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000006001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, {{&(0x7f0000001840), 0x6e, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/145, 0x91}, {&(0x7f0000001a40)=""/31, 0x1f}], 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18003f0000edd51e4026fafbb954ade0c7fa06d1552000de0100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001c00)=""/89, 0x59}, {&(0x7f0000001c80)=""/238, 0xee}, {&(0x7f0000001d80)=""/79, 0x4f}, {&(0x7f0000001e00)=""/233, 0xe9}], 0x4, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003400)=[{&(0x7f0000002080)=""/76, 0x4c}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/169, 0xa9}, {&(0x7f00000031c0)=""/246, 0xf6}, {&(0x7f00000032c0)=""/179, 0xb3}, {&(0x7f0000003380)=""/67, 0x43}], 0x6, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x5, 0x40000020, &(0x7f0000003600)) 02:33:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 02:33:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000}) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x3}) [ 323.219730] FAULT_INJECTION: forcing a failure. [ 323.219730] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 323.226014] CPU: 1 UID: 0 PID: 5289 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 323.226055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 323.226069] Call Trace: [ 323.226077] [ 323.226086] dump_stack_lvl+0xfa/0x120 [ 323.226141] should_fail_ex+0x4d7/0x5e0 [ 323.226189] _copy_from_user+0x30/0xd0 [ 323.226232] copy_msghdr_from_user+0x88/0x150 [ 323.226268] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 323.226306] ? __pfx_perf_trace_lock+0x10/0x10 [ 323.226346] ? lock_acquire+0x15e/0x2d0 [ 323.226382] ___sys_sendmsg+0xdc/0x1b0 [ 323.226417] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.226448] ? perf_trace_lock+0xb5/0x5d0 [ 323.226486] ? __pfx_perf_trace_lock+0x10/0x10 [ 323.226518] ? proc_fail_nth_write+0x97/0x220 [ 323.226555] ? lock_acquire+0x15e/0x2d0 [ 323.226584] ? __fget_files+0x34/0x3b0 [ 323.226610] ? find_held_lock+0x2b/0x80 [ 323.226631] ? __fget_files+0x203/0x3b0 [ 323.226656] ? lock_release+0xc8/0x270 [ 323.226691] ? __fget_files+0x20d/0x3b0 [ 323.226728] __sys_sendmsg+0x150/0x200 [ 323.226761] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.226800] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 323.226837] ? ksys_write+0x1a3/0x240 [ 323.226860] ? __pfx_ksys_write+0x10/0x10 [ 323.226881] ? irqentry_exit+0xee/0x650 [ 323.226902] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 323.226933] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 323.226974] do_syscall_64+0xbf/0x420 [ 323.227003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.227028] RIP: 0033:0x7f09edebfb19 [ 323.227047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.227070] RSP: 002b:00007f09eb435188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.227093] RAX: ffffffffffffffda RBX: 00007f09edfd2f60 RCX: 00007f09edebfb19 [ 323.227109] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 323.227123] RBP: 00007f09eb4351d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.227137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.227151] R13: 00007fff5761e0bf R14: 00007f09eb435300 R15: 0000000000022000 [ 323.227184] [ 323.295134] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 323.296264] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 323.303267] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 323.306250] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 323.307858] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) [ 323.348161] audit: type=1400 audit(1768357984.749:57): avc: denied { block_suspend } for pid=5295 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 02:33:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) 02:33:04 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 323.432715] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 323.434339] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 323.438676] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 323.439979] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 323.441786] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:04 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 02:33:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 2) 02:33:04 executing program 5: setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0006000000000000040100000100072800000000080000000000000000000000000000000000000000000000000000000000000000000000ced6637a4b2e4747df7e850d4b1afe3fe5d68b"], 0x38) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 02:33:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 02:33:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) [ 323.563777] FAULT_INJECTION: forcing a failure. [ 323.563777] name failslab, interval 1, probability 0, space 0, times 1 [ 323.565451] CPU: 1 UID: 0 PID: 5314 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 323.565479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 323.565491] Call Trace: [ 323.565499] [ 323.565508] dump_stack_lvl+0xfa/0x120 [ 323.565540] should_fail_ex+0x4d7/0x5e0 [ 323.565585] should_failslab+0xc2/0x120 [ 323.565611] kmem_cache_alloc_node_noprof+0x87/0x780 [ 323.565645] ? lock_release+0xc8/0x270 [ 323.565676] ? __alloc_skb+0x159/0x430 [ 323.565711] ? __alloc_skb+0x159/0x430 [ 323.565736] __alloc_skb+0x159/0x430 [ 323.565760] ? __alloc_skb+0x369/0x430 [ 323.565786] ? __pfx___alloc_skb+0x10/0x10 [ 323.565813] ? netlink_autobind.isra.0+0x158/0x370 [ 323.565859] netlink_alloc_large_skb+0x69/0x150 [ 323.565894] netlink_sendmsg+0x66d/0xd80 [ 323.565934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.565982] ____sys_sendmsg+0xa34/0xbf0 [ 323.566006] ? copy_msghdr_from_user+0xfb/0x150 [ 323.566045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.566079] ? lock_acquire+0x15e/0x2d0 [ 323.566112] ___sys_sendmsg+0x10f/0x1b0 [ 323.566145] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.566173] ? perf_trace_lock+0xb5/0x5d0 [ 323.566209] ? __pfx_perf_trace_lock+0x10/0x10 [ 323.566237] ? proc_fail_nth_write+0x97/0x220 [ 323.566272] ? lock_acquire+0x15e/0x2d0 [ 323.566300] ? __fget_files+0x34/0x3b0 [ 323.566323] ? find_held_lock+0x2b/0x80 [ 323.566343] ? __fget_files+0x203/0x3b0 [ 323.566366] ? lock_release+0xc8/0x270 [ 323.566399] ? __fget_files+0x20d/0x3b0 [ 323.566436] __sys_sendmsg+0x150/0x200 [ 323.566466] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.566510] ? __pfx_ksys_write+0x10/0x10 [ 323.566530] ? irqentry_exit+0xee/0x650 [ 323.566551] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 323.566580] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 323.566619] do_syscall_64+0xbf/0x420 [ 323.566647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.566670] RIP: 0033:0x7f09edebfb19 [ 323.566688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.566709] RSP: 002b:00007f09eb435188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.566730] RAX: ffffffffffffffda RBX: 00007f09edfd2f60 RCX: 00007f09edebfb19 [ 323.566744] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 323.566757] RBP: 00007f09eb4351d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.566769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.566782] R13: 00007fff5761e0bf R14: 00007f09eb435300 R15: 0000000000022000 [ 323.566816] 02:33:05 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 323.694605] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 323.695692] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 323.696877] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 323.697931] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 323.704102] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) 02:33:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 3) 02:33:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:14 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETS(r0, 0x4b4b, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffff) 02:33:14 executing program 4: r0 = fork() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 02:33:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) [ 332.912709] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 332.912982] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 332.915384] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 332.915481] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 332.916450] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:14 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) faccessat2(r0, &(0x7f0000000100)='./file1\x00', 0xb0, 0x1100) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2880, 0x0) setxattr$incfs_size(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=0x5, 0x8, 0x2) 02:33:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 02:33:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2902, 0x0) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x5, 0xa0, 0x5}, &(0x7f0000000100)) fadvise64(r1, 0x0, 0x0, 0x1) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000100), 0x4) fgetxattr(r3, &(0x7f0000000180)=@random={'security.', '+{})\x00'}, &(0x7f00000001c0)=""/188, 0xbc) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') [ 333.032635] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 333.033581] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 333.034983] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 333.035733] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 333.054366] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 02:33:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 4) 02:33:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) dup2(r2, r1) sendfile(r0, r1, 0x0, 0xfdef) 02:33:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:14 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 02:33:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 5) [ 333.254634] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 333.259996] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 333.267287] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 333.267884] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 333.269996] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:14 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 333.362147] FAULT_INJECTION: forcing a failure. [ 333.362147] name failslab, interval 1, probability 0, space 0, times 0 02:33:14 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 333.397127] CPU: 0 UID: 0 PID: 5383 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 333.397160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 333.397173] Call Trace: [ 333.397181] [ 333.397190] dump_stack_lvl+0xfa/0x120 [ 333.397228] should_fail_ex+0x4d7/0x5e0 [ 333.397280] ? ctnetlink_alloc_filter.part.0+0x9d/0x870 [ 333.397309] should_failslab+0xc2/0x120 [ 333.397342] __kmalloc_cache_noprof+0x80/0x780 [ 333.397379] ? perf_trace_lock+0xb5/0x5d0 [ 333.397420] ? ctnetlink_alloc_filter.part.0+0x9d/0x870 [ 333.397445] ? __netlink_lookup+0x63e/0x8f0 [ 333.397475] ctnetlink_alloc_filter.part.0+0x9d/0x870 [ 333.397503] ? __pfx_ctnetlink_alloc_filter.part.0+0x10/0x10 [ 333.397533] ? find_held_lock+0x2b/0x80 [ 333.397554] ? netlink_lookup+0x117/0x260 [ 333.397583] ? lock_release+0xc8/0x270 [ 333.397617] ctnetlink_start+0x118/0x270 [ 333.397645] __netlink_dump_start+0x5fd/0x980 [ 333.397684] ctnetlink_get_conntrack+0x57d/0x740 [ 333.397713] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 333.397745] ? __pfx_ctnetlink_start+0x10/0x10 [ 333.397767] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 333.397792] ? __pfx_ctnetlink_done+0x10/0x10 [ 333.397820] ? net_generic+0x25/0x2a0 [ 333.397848] ? find_held_lock+0x2b/0x80 [ 333.397869] ? find_held_lock+0x2b/0x80 [ 333.397889] ? nfnetlink_rcv_msg+0x88c/0x1120 [ 333.397920] ? lock_is_held_type+0x9e/0x120 [ 333.397948] nfnetlink_rcv_msg+0x9bf/0x1120 [ 333.397995] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.398031] ? perf_trace_lock_acquire+0xc9/0x700 [ 333.398103] ? lock_release+0xc8/0x270 [ 333.398138] ? avc_has_perm_noaudit+0x150/0x3d0 [ 333.398179] netlink_rcv_skb+0x147/0x430 [ 333.398213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.398246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.398276] ? __lock_acquire+0x451/0x2250 [ 333.398325] ? ns_capable+0xe2/0x120 [ 333.398369] nfnetlink_rcv+0x1af/0x420 [ 333.398397] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.398433] ? netlink_deliver_tap+0x1ae/0xce0 [ 333.398474] netlink_unicast+0x5a7/0x870 [ 333.398521] ? __pfx_netlink_unicast+0x10/0x10 [ 333.398555] ? __virt_addr_valid+0x100/0x5d0 [ 333.398595] netlink_sendmsg+0x8a3/0xd80 [ 333.398635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.398686] ____sys_sendmsg+0xa34/0xbf0 [ 333.398711] ? copy_msghdr_from_user+0xfb/0x150 [ 333.398743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.398779] ? lock_acquire+0x15e/0x2d0 [ 333.398814] ___sys_sendmsg+0x10f/0x1b0 [ 333.398853] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.398883] ? perf_trace_lock+0xb5/0x5d0 [ 333.398924] ? __pfx_perf_trace_lock+0x10/0x10 [ 333.398953] ? proc_fail_nth_write+0x97/0x220 [ 333.398992] ? lock_acquire+0x15e/0x2d0 [ 333.399020] ? __fget_files+0x34/0x3b0 [ 333.399044] ? find_held_lock+0x2b/0x80 [ 333.399065] ? __fget_files+0x203/0x3b0 [ 333.399088] ? lock_release+0xc8/0x270 [ 333.399128] ? __fget_files+0x20d/0x3b0 [ 333.399169] __sys_sendmsg+0x150/0x200 [ 333.399202] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.399252] ? __pfx_ksys_write+0x10/0x10 [ 333.399273] ? irqentry_exit+0xee/0x650 [ 333.399293] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 333.399323] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 333.399363] do_syscall_64+0xbf/0x420 [ 333.399393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.399416] RIP: 0033:0x7f09edebfb19 [ 333.399434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 333.399455] RSP: 002b:00007f09eb435188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.399476] RAX: ffffffffffffffda RBX: 00007f09edfd2f60 RCX: 00007f09edebfb19 [ 333.399491] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 333.399504] RBP: 00007f09eb4351d0 R08: 0000000000000000 R09: 0000000000000000 [ 333.399517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.399530] R13: 00007fff5761e0bf R14: 00007f09eb435300 R15: 0000000000022000 [ 333.399566] [ 333.532398] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 333.533324] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 333.535500] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 333.536624] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 333.539867] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:23 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x208000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x0, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x6}], "7c647cde1dce4080"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x10}, {0xc8, 0x5}, {0x20, 0x7}, {0x1, 0x5}, {0x40, 0x7}, {0x3, 0x3}, {0xc4, 0x2}, {0x8, 0x7}, {0x4, 0x6}, {0x2f, 0x6}, {0x3, 0x1}, {0x80, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {}, {0x3f, 0x5}, {0x47, 0xf7}, {0x7f, 0x7}, {0x4, 0x3}, {0x80, 0x7}], "de3d3f70a77d5fd6"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x4}, {0xff, 0x7}, {0x6, 0x5}, {0x1, 0x2}, {0x81, 0x5}, {0x2c, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x1}], "d6ab56eae28f4e43"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{}, {0x1, 0x6}, {0x3f, 0x4}, {0xe1, 0x2}, {0x3f, 0x3}, {0x3, 0x3}, {0x76, 0x6}, {0x7f, 0xff}, {0x2a, 0x1}, {0x2, 0x7}, {0x2}, {0x80, 0x1}, {0xe}, {0x9, 0x7}, {0x80, 0x6}, {0x3f, 0x3}, {0x3f, 0x5}, {0x9, 0x4}, {0xff, 0x6}, {0x6, 0x4}], "82a2fbe0eca3613e"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xd, 0x7}, {0x0, 0x3}, {}, {0x1e, 0x1}, {0x6, 0x5}, {0x9, 0x6}, {0x6, 0x3f}, {0x8a, 0x1}, {0x1, 0x7}, {0xfd, 0x4}, {0x5}, {0x2, 0x5}], "bf0d5c4523943a14"}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000180)) close(r4) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 02:33:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 6) 02:33:23 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:23 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:33:23 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:23 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@initdev, @in6=@remote}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setresuid(0xee01, 0xffffffffffffffff, r0) setreuid(0xee00, 0xffffffffffffffff) setfsuid(0x0) [ 342.126341] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 342.129822] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 342.132517] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 342.133602] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 342.138160] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 342.292149] syz-executor.5 (5406) used greatest stack depth: 23672 bytes left 02:33:33 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) fcntl$getown(r0, 0x9) 02:33:33 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 02:33:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 7) 02:33:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:33 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xc841, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 02:33:33 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x24) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9014, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1) 02:33:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 352.293317] FAULT_INJECTION: forcing a failure. [ 352.293317] name failslab, interval 1, probability 0, space 0, times 0 [ 352.298633] CPU: 1 UID: 0 PID: 5430 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 352.298654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 352.298663] Call Trace: [ 352.298668] [ 352.298674] dump_stack_lvl+0xfa/0x120 [ 352.298698] should_fail_ex+0x4d7/0x5e0 [ 352.298729] ? ctnetlink_alloc_filter.part.0+0x9d/0x870 [ 352.298748] should_failslab+0xc2/0x120 [ 352.298767] __kmalloc_cache_noprof+0x80/0x780 [ 352.298791] ? perf_trace_lock+0xb5/0x5d0 [ 352.298818] ? ctnetlink_alloc_filter.part.0+0x9d/0x870 [ 352.298834] ? __netlink_lookup+0x63e/0x8f0 [ 352.298854] ctnetlink_alloc_filter.part.0+0x9d/0x870 [ 352.298873] ? __pfx_ctnetlink_alloc_filter.part.0+0x10/0x10 [ 352.298892] ? find_held_lock+0x2b/0x80 [ 352.298906] ? netlink_lookup+0x117/0x260 [ 352.298925] ? lock_release+0xc8/0x270 [ 352.298947] ctnetlink_start+0x118/0x270 [ 352.298965] __netlink_dump_start+0x5fd/0x980 [ 352.298989] ctnetlink_get_conntrack+0x57d/0x740 [ 352.299008] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 352.299034] ? __pfx_ctnetlink_start+0x10/0x10 [ 352.299049] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 352.299066] ? __pfx_ctnetlink_done+0x10/0x10 [ 352.299083] ? net_generic+0x25/0x2a0 [ 352.299102] ? find_held_lock+0x2b/0x80 [ 352.299116] ? find_held_lock+0x2b/0x80 [ 352.299129] ? nfnetlink_rcv_msg+0x88c/0x1120 [ 352.299149] ? lock_is_held_type+0x9e/0x120 [ 352.299167] nfnetlink_rcv_msg+0x9bf/0x1120 [ 352.299195] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 352.299237] ? lock_release+0xc8/0x270 [ 352.299259] ? avc_has_perm_noaudit+0x150/0x3d0 [ 352.299285] netlink_rcv_skb+0x147/0x430 [ 352.299307] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 352.299328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.299349] ? __lock_acquire+0x451/0x2250 [ 352.299378] ? ns_capable+0xe2/0x120 [ 352.299407] nfnetlink_rcv+0x1af/0x420 [ 352.299426] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 352.299445] ? netlink_deliver_tap+0x1ae/0xce0 [ 352.299470] netlink_unicast+0x5a7/0x870 [ 352.299495] ? __pfx_netlink_unicast+0x10/0x10 [ 352.299519] ? __virt_addr_valid+0x100/0x5d0 [ 352.299547] netlink_sendmsg+0x8a3/0xd80 [ 352.299572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.299603] ____sys_sendmsg+0xa34/0xbf0 [ 352.299620] ? copy_msghdr_from_user+0xfb/0x150 [ 352.299641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.299667] ? lock_acquire+0x15e/0x2d0 [ 352.299689] ___sys_sendmsg+0x10f/0x1b0 [ 352.299711] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.299730] ? perf_trace_lock+0xb5/0x5d0 [ 352.299754] ? __pfx_perf_trace_lock+0x10/0x10 [ 352.299773] ? proc_fail_nth_write+0x97/0x220 [ 352.299797] ? lock_acquire+0x15e/0x2d0 [ 352.299816] ? __fget_files+0x34/0x3b0 [ 352.299832] ? find_held_lock+0x2b/0x80 [ 352.299845] ? __fget_files+0x203/0x3b0 [ 352.299860] ? lock_release+0xc8/0x270 [ 352.299883] ? __fget_files+0x20d/0x3b0 [ 352.299906] __sys_sendmsg+0x150/0x200 [ 352.299926] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.299954] ? __pfx_ksys_write+0x10/0x10 [ 352.299968] ? irqentry_exit+0xee/0x650 [ 352.299981] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 352.300002] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 352.300027] do_syscall_64+0xbf/0x420 [ 352.300046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.300062] RIP: 0033:0x7f09edebfb19 [ 352.300074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.300088] RSP: 002b:00007f09eb435188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.300103] RAX: ffffffffffffffda RBX: 00007f09edfd2f60 RCX: 00007f09edebfb19 [ 352.300112] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 352.300121] RBP: 00007f09eb4351d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.300130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.300138] R13: 00007fff5761e0bf R14: 00007f09eb435300 R15: 0000000000022000 [ 352.300159] [ 352.337198] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 352.337871] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 352.338673] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 352.339345] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 352.339999] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 02:33:33 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x77a4, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5415, 0x0) 02:33:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:33 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 8) 02:33:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x5e) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000000)=0x10) r3 = socket(0x1, 0xa, 0x9) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='geneve1\x00', 0x10) 02:33:33 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = dup3(r0, r0, 0x80000) recvmmsg$unix(r3, &(0x7f0000008f00)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000001340)=""/136, 0x88}, {&(0x7f0000001400)=""/181, 0xb5}, {&(0x7f00000014c0)=""/158, 0x9e}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000001580)=""/64, 0x40}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/71, 0x47}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/62, 0x3e}], 0xa}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004740)}, {&(0x7f0000004780)=""/82, 0x52}, {&(0x7f0000004800)=""/188, 0xbc}, {&(0x7f00000048c0)=""/91, 0x5b}, {&(0x7f0000004940)=""/1, 0x1}, {&(0x7f0000004980)=""/41, 0x29}, {&(0x7f00000049c0)=""/64, 0x40}], 0x7, &(0x7f0000004a80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004ac0)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004b40)=""/77, 0x4d}, {&(0x7f0000004bc0)=""/167, 0xa7}, {&(0x7f0000004c80)=""/50, 0x32}], 0x3, &(0x7f0000004d00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000004d40), 0x6e, &(0x7f0000005180)=[{&(0x7f0000004dc0)=""/216, 0xd8}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/113, 0x71}, {&(0x7f0000004fc0)=""/160, 0xa0}, {&(0x7f0000005080)=""/242, 0xf2}], 0x5}}, {{&(0x7f0000005200)=@abs, 0x6e, &(0x7f0000008280)=[{&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/4096, 0x1000}], 0x3}}, {{&(0x7f00000082c0), 0x6e, &(0x7f0000008880)=[{&(0x7f0000008340)=""/121, 0x79}, {&(0x7f00000083c0)=""/83, 0x53}, {&(0x7f0000008440)=""/149, 0x95}, {&(0x7f0000008500)=""/83, 0x53}, {&(0x7f0000008580)=""/97, 0x61}, {&(0x7f0000008600)=""/40, 0x28}, {&(0x7f0000008640)=""/205, 0xcd}, {&(0x7f0000008740)=""/35, 0x23}, {&(0x7f0000008780)=""/232, 0xe8}], 0x9, &(0x7f0000008940)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000008a00), 0x6e, &(0x7f0000008b80)=[{&(0x7f0000008a80)=""/218, 0xda}], 0x1, &(0x7f0000008bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000008d00)=@abs, 0x6e, &(0x7f0000008e80)=[{&(0x7f0000008d80)=""/238, 0xee}], 0x1, &(0x7f0000008ec0)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x60, 0x0) [ 352.541497] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 352.542304] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 352.542915] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 352.543555] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b00)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/127, 0x7f, 0x3) close_range(r0, r0, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x7, {{0x2, 0x4e20, @empty}}}, 0x88) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 02:33:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 02:33:44 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:33:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 9) 02:33:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x23ff}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d769535eef3500"]) open(&(0x7f0000000080)='./file0\x00', 0x204801, 0x0) 02:33:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300), 0x500) 02:33:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:44 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/156, 0x9c, 0x0) 02:33:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 363.054488] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 363.059070] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.060434] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.063378] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 363.065360] FAULT_INJECTION: forcing a failure. [ 363.065360] name failslab, interval 1, probability 0, space 0, times 0 [ 363.082134] CPU: 0 UID: 0 PID: 5478 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 363.082166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 363.082180] Call Trace: [ 363.082188] [ 363.082197] dump_stack_lvl+0xfa/0x120 [ 363.082229] should_fail_ex+0x4d7/0x5e0 [ 363.082275] should_failslab+0xc2/0x120 [ 363.082301] kmem_cache_alloc_node_noprof+0x87/0x780 [ 363.082339] ? mark_held_locks+0x49/0x80 [ 363.082366] ? __alloc_skb+0x159/0x430 [ 363.082402] ? __alloc_skb+0x159/0x430 [ 363.082426] __alloc_skb+0x159/0x430 [ 363.082450] ? __alloc_skb+0x369/0x430 [ 363.082476] ? __pfx___alloc_skb+0x10/0x10 [ 363.082501] ? mark_held_locks+0x49/0x80 [ 363.082531] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 363.082569] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 363.082609] netlink_dump+0x194/0x1200 [ 363.082643] ? perf_trace_lock+0xb5/0x5d0 [ 363.082677] ? __pfx_netlink_dump+0x10/0x10 [ 363.082705] ? __kasan_kmalloc+0x7f/0x90 [ 363.082747] ? lock_release+0xc8/0x270 [ 363.082785] __netlink_dump_start+0x6c5/0x980 [ 363.082821] ctnetlink_get_conntrack+0x57d/0x740 [ 363.082851] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 363.082879] ? __pfx_ctnetlink_start+0x10/0x10 [ 363.082902] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 363.082927] ? __pfx_ctnetlink_done+0x10/0x10 [ 363.082953] ? net_generic+0x25/0x2a0 [ 363.082980] ? find_held_lock+0x2b/0x80 [ 363.083001] ? find_held_lock+0x2b/0x80 [ 363.083027] ? nfnetlink_rcv_msg+0x88c/0x1120 [ 363.083058] ? lock_is_held_type+0x9e/0x120 [ 363.083084] nfnetlink_rcv_msg+0x9bf/0x1120 [ 363.083127] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 363.083155] ? perf_trace_lock_acquire+0xc9/0x700 [ 363.083219] ? lock_release+0xc8/0x270 [ 363.083253] ? avc_has_perm_noaudit+0x150/0x3d0 [ 363.083291] netlink_rcv_skb+0x147/0x430 [ 363.083324] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 363.083356] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.083386] ? __lock_acquire+0x451/0x2250 [ 363.083431] ? ns_capable+0xe2/0x120 [ 363.083474] nfnetlink_rcv+0x1af/0x420 [ 363.083502] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 363.083530] ? netlink_deliver_tap+0x1ae/0xce0 [ 363.083568] netlink_unicast+0x5a7/0x870 [ 363.083605] ? __pfx_netlink_unicast+0x10/0x10 [ 363.083638] ? __virt_addr_valid+0x100/0x5d0 [ 363.083675] netlink_sendmsg+0x8a3/0xd80 [ 363.083713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.083760] ____sys_sendmsg+0xa34/0xbf0 [ 363.083784] ? copy_msghdr_from_user+0xfb/0x150 [ 363.083816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.083849] ? lock_acquire+0x15e/0x2d0 [ 363.083881] ___sys_sendmsg+0x10f/0x1b0 [ 363.083914] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.083943] ? perf_trace_lock+0xb5/0x5d0 [ 363.083978] ? __pfx_perf_trace_lock+0x10/0x10 [ 363.084007] ? proc_fail_nth_write+0x97/0x220 [ 363.084043] ? lock_acquire+0x15e/0x2d0 [ 363.084070] ? __fget_files+0x34/0x3b0 [ 363.084094] ? find_held_lock+0x2b/0x80 [ 363.084114] ? __fget_files+0x203/0x3b0 [ 363.084137] ? lock_release+0xc8/0x270 [ 363.084170] ? __fget_files+0x20d/0x3b0 [ 363.084205] __sys_sendmsg+0x150/0x200 [ 363.084236] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.084278] ? __pfx_ksys_write+0x10/0x10 [ 363.084299] ? irqentry_exit+0xee/0x650 [ 363.084319] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 363.084349] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 363.084388] do_syscall_64+0xbf/0x420 [ 363.084416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.084438] RIP: 0033:0x7f09edebfb19 [ 363.084456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 363.084477] RSP: 002b:00007f09eb435188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.084499] RAX: ffffffffffffffda RBX: 00007f09edfd2f60 RCX: 00007f09edebfb19 [ 363.084514] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 363.084527] RBP: 00007f09eb4351d0 R08: 0000000000000000 R09: 0000000000000000 [ 363.084540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.084552] R13: 00007fff5761e0bf R14: 00007f09eb435300 R15: 0000000000022000 [ 363.084585] 02:33:44 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:33:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:44 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 10) [ 363.291061] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 363.294221] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.295534] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.308484] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=@expire={0x1e8, 0x18, 0x200, 0x70bd2c, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@loopback, 0x4e20, 0x0, 0x4e22, 0x7f, 0xa, 0x80, 0x20, 0x16, 0x0, r2}, {@in6=@mcast1, 0x4d3, 0x33}, @in=@remote, {0xea, 0x35f7, 0x64, 0x400, 0x9, 0x4, 0x8, 0x81}, {0x3, 0x5, 0x2, 0x5}, {0x8, 0x1f}, 0x70bd2b, 0x3504, 0xa, 0x5, 0x3f, 0x50}, 0x2}, [@sa={0xe4, 0x6, {{@in=@loopback, @in6=@private2, 0x4e22, 0x100, 0x4e22, 0x0, 0x2, 0x0, 0xa0, 0x6, 0x0, 0xffffffffffffffff}, {@in=@loopback, 0x4d5, 0xcd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x7ea1, 0xfff, 0x64f81af3, 0x7ff, 0x8000, 0x77c0, 0x4, 0x100000000}, {0x6b, 0x4, 0x0, 0x7}, {0x80000000, 0x7, 0xb278}, 0x70bd28, 0x3506, 0x2, 0x1, 0x20, 0x8}}, @mark={0xc, 0x15, {0x35075c, 0x59}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20040054}, 0x4) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 02:33:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:44 executing program 6: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:44 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x80, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x5, 0x0, 0xffff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d95549164c621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf62000000000000000000000000000000007a81969c8946caa8d92e1e93c02896408f83d11c5cab1d5104339294748ce3eed789fcc68e5886288428f9f86e531957aacc8debad9ac20862ea213c9c04b92fea7d4ddfc57f03b7cd00fe782ca052b9f6ac76c9832bb7f4fa0220a5de0834ec00", 0xed}, {&(0x7f0000000540)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:33:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:33:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 363.491120] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 363.496233] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.499116] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.500235] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:44 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7, 0x1, 0x9, 0x5, 0x0, 0x7, 0x10, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xd218, 0x12}, 0x1320, 0x7ff, 0x14, 0x9, 0x100, 0xe0, 0x3, 0x0, 0x8000, 0x0, 0x2}, r1, 0x1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="1fc50ccd58a02ac92212e4a43f6a0178ac577ebdbb01ec0356e9784663291eed9e7ed9bad122ce90c56019042fbade03e38161fc75136d1dddddea662a870e9724b931b3f8d2c6c35f0b177f03d1e6271b1cb23a643838b5a7723c2deb04d79042b99f721e53b386f9eb470bd6234157647e8bdf211257edcff871e46335167809803f4a85cbaf48645db0b313f964bab48fa2a65a39012cb417e93f8ec719acd0f5df05872c1b08d134", 0xaa) madvise(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x8) 02:33:44 executing program 6: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:33:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:33:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (fail_nth: 11) 02:33:45 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x80, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x5, 0x0, 0xffff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d95549164c621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf62000000000000000000000000000000007a81969c8946caa8d92e1e93c02896408f83d11c5cab1d5104339294748ce3eed789fcc68e5886288428f9f86e531957aacc8debad9ac20862ea213c9c04b92fea7d4ddfc57f03b7cd00fe782ca052b9f6ac76c9832bb7f4fa0220a5de0834ec00", 0xed}, {&(0x7f0000000540)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 363.665133] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 363.666462] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.667577] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.668695] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:45 executing program 6: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 363.889127] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 363.890413] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.891488] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 363.892525] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:56 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:56 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:56 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0xffffffffffff7fff, 0x80, 0x15, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x5, 0x0, 0xffff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="006539a6f88e042bcd2b7b14c169d9d9a393edbe1156c57d3770298dc2397fa03d0016a889455f7be8e67b07c24c819221a91313fa4a454f02d95549164c621651d20057c46edb2afb9a0c22e1940f9517a2752bf9820400a4cfa86b97ba592e46d2c714ad04c6ba3d02fd27020e4ae188c4418962c25cc777facf62000000000000000000000000000000007a81969c8946caa8d92e1e93c02896408f83d11c5cab1d5104339294748ce3eed789fcc68e5886288428f9f86e531957aacc8debad9ac20862ea213c9c04b92fea7d4ddfc57f03b7cd00fe782ca052b9f6ac76c9832bb7f4fa0220a5de0834ec00", 0xed}, {&(0x7f0000000540)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)}}], 0x3, 0x44894) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:33:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:33:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:33:56 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:33:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:33:56 executing program 6: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 375.029093] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 375.034126] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 375.034813] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 375.049586] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:33:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 384.641075] Bluetooth: hci4: command 0x0406 tx timeout 02:34:07 executing program 6: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:07 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local, {[@timestamp={0x7, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "388a57", 0x0, "3856f7"}}}}}}, 0x0) syz_emit_ethernet(0xe3, &(0x7f0000000040)={@empty, @empty, @void, {@mpls_uc={0x8847, {[{0x3ff}, {0x7db5}, {0xf9}, {0xff}, {0x401}, {0xffff9}, {0x7}, {0xffc00, 0x0, 0x1}], @llc={@snap={0x0, 0xab, '{', "d41295", 0x6, "dc3be687f73c8014971a6356d15048a6acb0f7994278ed6c44134c626e67e581552ad94af0afb367baba78ec263052c58382abbe669ead827eb3c3026a3a22e97e62d6870c1d37f559678722e58c2cca5697a1a759818c8f1610b9864290557dbf59435c7aa058bed0037079cfa017e09ada64158beaa50e10ed45b90d506d9a70ea6eac821e7e8f92efee50bd7d97c2553951c8b8c40df9a9b616d6b8911c9703ee2b1a805e4fc842649b5b1b"}}}}}}, &(0x7f0000000140)={0x0, 0x2, [0xf2, 0x38c, 0xd3f, 0x5c4]}) 02:34:07 executing program 4: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000203050001000000000000000f00000408000100020000080800044000000020"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="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"], 0x279c}, 0x1, 0x0, 0x0, 0x50}, 0x800) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002c00)={0x2, 0x80, 0x4, 0xf9, 0x2, 0x80, 0x0, 0x5, 0x80, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x1, @perf_bp={&(0x7f00000001c0), 0x6}, 0x0, 0x4c5, 0x4, 0x2, 0x3f, 0x9, 0xf240, 0x0, 0x20, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x6) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000002bc0)=ANY=[@ANYBLOB="010000180000000000780000c7", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$zero(0xffffffffffffff9c, &(0x7f0000002b80), 0x4c4042, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x2, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x12}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000840) 02:34:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x3, 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @private2, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000100), 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000100), 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000180)=0x8, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000140)) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) fcntl$dupfd(r2, 0x0, r1) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) close_range(0xffffffffffffffff, r4, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) close_range(r1, r0, 0x2) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:34:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 385.890782] mmap: syz-executor.4 (5569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 385.892062] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 385.904904] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 385.906225] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 385.908625] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:07 executing program 6: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 385.968699] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 385.973937] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 385.975377] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 385.979483] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_hsr\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}) 02:34:07 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 386.145644] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 386.147338] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 386.156582] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 386.158658] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 386.164901] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:18 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendfile(r2, r3, 0x0, 0x40000014100) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 02:34:18 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000000)={&(0x7f00000003c0)=""/4096, 0x1000, 0xc4d, 0x7}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r3, &(0x7f0000000180)=""/119, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c883000"]) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000200)=""/169) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x4, 0x40, 0x0, 0x0, 0x9, 0xb85be8c18f194825, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x4, @perf_config_ext={0xfffffffffffffe98, 0x1}, 0x1100, 0x1, 0x80000000, 0x0, 0x3224, 0x6d6, 0x8000, 0x0, 0xffffffff, 0x0, 0x10000}, 0x0, 0x10, r3, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 02:34:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:34:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:18 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:18 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r0, &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="140000000100000000000000000000000000004000000000000000004fa371f8f0727265a4ea291daec5d358f3e64e780ac0215646c7803fd2d5f091b9949dc56733792afdcaeb8838a299515ab834e04eb9147dee26434709bd6e1715677f05444c6014e0f69aba872a0fb6d0378ac41f6875ae644a4fd4d06c966c595f584d055dce3fc338b5bee742d38d06443713bd9e"], &(0x7f0000000240), 0x1400) fstatfs(r0, &(0x7f00000000c0)=""/121) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}}, 0x40) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x62, 0x76}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x36}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x88d1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000003cb7c9dbc18fc855e53b6dc775ff1c4462c694acaa506b0f55c6b279584b16fa39e357268b4fb0ca07d3a784073104148774ab957272f3229ee796a21953bd90fc77019d156e290148724ab2a22ca6660a0fabcd739f707c0266b1b6d099c465a88956369c386a85fb0742d77c0264ec5a4611056151a80e3acda2b676ee3de9a6582693867a375992bd55d8e85da3a130ae927402dc9dbb1c5dade532e41f7d4b81ab4076eff107b0b4c1058908bac38fcd5a168e44356dc16b2dbf24536301c18ca24512ed41d5daeb37ceed05", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./mnt\x00']) name_to_handle_at(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x81, 0x3, 0x1000, 0x7ff, 0x3, 0x800}}, &(0x7f0000000200), 0x0) statx(r0, &(0x7f0000000700)='./file0\x00', 0x100, 0x100, &(0x7f0000000740)) [ 397.546131] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 397.574003] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 397.577223] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 397.578390] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 397.584264] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) 02:34:19 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:19 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 397.729981] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 397.731160] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 397.732472] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 397.733555] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 397.734643] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:19 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:19 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:19 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x2, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_setup(0x3, 0x0) io_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x1722, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) poll(0x0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) io_setup(0xe0bf, &(0x7f0000000240)=0x0) r3 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) io_submit(r2, 0xa, &(0x7f0000001bc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x3f35, r0, &(0x7f0000000280)="cb24732db3c5fd4010423cabadea70be6d4d87bda8e5bbd0c7f17ad8318f49615daee7b0e0080430dc4416a6c1ee8b2e4a6ad7552ba893e0d1c8e8e28480c362e34c388f4261c5404d7819bad2c8e5916385bf33c4b0b8fd427e5b74500a6199b2120f5fb480f52bdf9d981ddbdb3f23ba3ee76dc45b5259a3998e8b79e35b5c9f94cee7dddfdd7d0777a43c9a6ba0b3a086f992cfdb793fede7c9449626e299a9b7206bbe8f5a5dcbfa8e16a06a40e3900c496059d7fe8e3de1e5e36de2", 0xbe, 0x7fff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0x0, 0xda4, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x538, 0xffffffffffffffff, &(0x7f0000000400)="ce55bf0953a3756c4b0d238140dc7462cfdc636e756be97b29b6baa060326ccc6037ae3fed3564ad3cdb5e3dbca0c83b07e23425368883d23b64306f", 0x3c, 0x7, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000480)="23376b6de3287c52ea878df63adc2160fdfd1e3e61a6b5f9956144ca54f8482e513f45678b41e94e81690619aed8d682232cd60c1ee7ec15dbdf4ed8385ea2a4080d0f6c8271d8acff979053e4700456a9cfe95304b3dba8cca21b12b02eb20df0bdc9262120b39f59180e4f0f225bcf657393c99e9d0b453500d770a93a30764e173c6ca18bf2e1e9a33a4c99fc9a568e917ecebcf4fedcf7fd146f649c48c2a69cfe7346f5b43b7a5c", 0xaa, 0x0, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xe865, r0, &(0x7f0000000580)="71561f6b03992d05f225ed131798c026fa0c69f703a04907fecbf975ce78ef168e106bd910bcc6591024e7812ddf86d7b3bccb9e4e7e34fd215a081509f013e21a3df2acd7fc9f6660e15786765ad6dce3e007f310c1d989e5ef3ba9f1fcf6843daac33448a8f8cd66a3829f853d1fceac760b2a1e73e2beee8195bccbb386b799b5815c51e678786d67db8bd2ea74e81703cdca310a9fc146592950ba610729858bd131700ced6b0595ed98ac261b0a02981592c505caab2dcaa9ccada016a1a2776e5e77d309d8f5eff2c943d6748730fce1", 0xd3, 0x80, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0xa20, 0xffffffffffffffff, &(0x7f0000000700)="61f2fd67a4e797549ce2ee132582086c9a5456572c2576bacf4b6f0f82e8979353c42ba058d44ad5acb09ed050460cf13202cb8147dfa9cb62f96d75533ba5284e3e5bea25b7cff7668a5a41a0553316e6daeca7c3e975847f8eab066620bf39d523e4b7d3891e91da9c5dddd9e6e8afd9c977d61ab4bbb43e39096722fa516f12b1d8cd8b42150dd8a4b48c64b813f6955ab44022940da7dc0dc9fa7949ae02c5831541dc12ab3ba81f4531badfbf352bf3fa6ab1f9fe38bf2969d1aa511f1dda8a1e", 0xc3, 0xff, 0x0, 0x0, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="dd800245fc739f07bd2f9b57c239ecd63454d18a92ee453f113e2c99db5393c8c061ea65256841ad7f9c0aa4a71e986c7d89d808edddbdf9f450fd2cba07c7bbf9a5452f0d9bec59e59e29f9a3462f3f3fb8629a9c20237ea568b0e5be6b980baaed4aa986a10cd80e63971fc985ae682c48f0ad2638d2f0e3946a3afdd57cf1f584ceac0578a9087e44af5f25ae73803533a5c4c80e281c205195d85ead4aba72395c1c5a9746260d53b7c6a99f86127807aa1660125234074f0f4d", 0xbc, 0x1ff, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f00000009c0)="36c9cf1268cc7bcf546cbe208129c3c81dd250cd98c296b15399f1a5a0552f895f2bdbff4c0efcac79672ad45d910ccf60d471364980f27e917dfcf02950d0a46512fac2e4af9dd02bc1fd4ec8fdce7ac58314ac710a1b87d454fccef0427db54fd8bf2d27a3ec744311d10f4162df671f", 0x71, 0x1ff, 0x0, 0x1, r0}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000a40)="c1597b8d313a21832152c494b742ee608a701b9eb55e939eaca98ce001bd186950c7d8c073da51abd9f8795fe4ab4c57158f7274304b15a76f5a101c7c1cbd73f1d3b07bd9aed75f68288217e0da6529e4fc8d9777adb314d2cb0e416223084306a01692a3b5d1058025d370f980de1b6aed62840fca92ad938fc9e4cceae78d9b7e404c9729ddc2eb292072513fc7bb47cc24ea58cdf93edc33522e1009c5f329a52fee9e4b30048fce901a6158a686e204c535c11fee02dbfbf2a98ea91dd418e2f429ff91902dcf6854071b73992d27238c449f65369a2fa6e15616b667fd63ad7b0345c362c4bc2bf1ff976341c7af00fa919d3759ed176caa60c1fe6b22c710eb0d42a701b4bcdcfdcd8d8875c1fa4c4e2533e1f8eef0ec7a959a16a8dbe320d59e4fa6f7077dd27868a02384f4b1ad4b1272776beb1c942195a2efee6ca84b065cde887e092dc7d3feba61b8ad6e80811d279b33d82b3caff4ced3a44edaf45cefca2d3f35c430aa8e42f31177bb35c26dcbafbaa6d4d19f4b19c67b180a2620e544c13f41edfc356f11976c37d47c53e010f3f59997379ccc1f3312745eaeb3639eae8a81fe6eedcd4732d158bf3befdc57772448dc1515423b75706064bac8404931add77411c5c2bbf77598a46d4fb34981ba54f6ec3aa4d5b33530de7abc7dea3fba65248ed1bc5563c463aadc15a6d8a3546e931dff6336e1e43446407ef781c78829917d7fa523a5ad08f2f3d2e95c0ba5cf2e825f117afe939149cfa14af3242475a340c43ac2c1b9954f2632a7ae9009d66e9db38fb46a56a8686a69a7a7e049065eeccb41feb7bf33f88c4509d0902a21b38dc2683af8617907e90db258491f542aefd06736bd332fbef692114e5dccebdf5110ab4c5b5c613f93f635471d5b949e4d3084f6651e90a77c9b51305a68af9bfe18b28bcf0a5e0b84f72c8fe8535ec1194f7ca6845df770eb452b1051c25c4c0cb04ff15076d8f8d5cd9291287ca56db0850ec31a90db4dc63fd80bdbde41663ef692ada3841116e4b9e6dc2644a57d165f8ce49c6e7cfd0265154be37d969876bce2c61b57ed08d9cbb4f109a7e33d243761bbdc68c6380c763f166fca632584270d4e407ac6ebe71cd27aec39743882897b84132bbab5d51340af2abe531c8596daf029be1d43cb2a776a1155c501609c4bf3f63205a863fb06df00cd6172094d8d3f69d98744e49988b0d145e7fdb15b50f1b0b95bc6560e419450380f41a5856a7ddf98164f9494e2b7456549bd57b9b1cfd04f0e0f8ba668acb2087728bfe3d273e5d2c6dcadd97ad9ae6396766ffcd313437d78de8ca21fc8c3c07f9a710e1d4f4bd338ebcdda10595086868cf79bf24302c7320dbb4399424ccf50760dfb9ed53e329b016eab839a4a1ccc3d9cad072919db598e6ac5cadad2c0dbdd1ae37ec0f711cd2bb06503c3d5647c058644041497731629f8b5222c165283f8526673d62c3dcd80014cbf71c4473e75ea46e304c4d81f343b9a655334402f6173275f2fba440a357152fe7f6a90e3e2ed41ec3eb48d68fa5871031bbe7fe8e301c3d22dd72a7846265a7cce682a5edff1ae7032ed72cc7b16cdf59355a173695dc2d54f8441032b67a00265b8c6dc5005df482c3775e83d813b4373c01cd4e671e66d1b2578b87878324e48f5b86764f401e18a3318cb5321b6aa0b04d0172439d736cb74bd8461eb3efa69e818eb6f6ad845db837b922e7ede296e253c65d79da3e74da06407c604f08bb69de06d9ea691f104f3cfda189dbfdcde03fab7ca554e39d73377e6dd869754b32d3082f52c9689031dee81b870dc76548532b189b5d635548b706cecf68a474ba9bbbf347e60298e67078a94bfda579a5005ad7d6b7cf38689d6ef03ed22778c97dabe46c0ff0bfb9e37410d9b869de1fd0129599ecf080795a19642c50d630cc3a1bd0c1a627faf959e6384bc6671ec98cc4fe206fffcb0adb45eb497e847e2cdc9daf6f3d947e97b3ff7d83fa7502d230be261e6e0cf71eb54b8b368f9a554c8861e3483bdda634e2a211b747f124e15572b70b181404b63ba5cafeca9677c50ebcdc97f89c9e685d083da702cd24ba1f75990f4d55525749acb26c261966ed36ffabd914e72b89cae74926c6c9c3dbf15092d817804d7d6baab87f117998b419a7026c729627d54ac56737fa55f1773accaf3044ae6d5d755da4f938135c7db0cbfa924a719371cbd7e272f90cd931af931cc2f1c3667c00209f9404374a2b61d424a2b73a50c61e26459c9b8fc494c73b8d8293fbf030c6b62f2729e4a73467906af9da3e49f7aacca8ef7e739795e479a0f738e39abec631e64d17cd83533d7413928e903c089cce89a4efd3c7c23fc2b4d1d5208022e8574682b3d27bbbd06edcfa3d21e84ff544e10256b1463d4b0691ff855ebb28ec6714876f04d7a7974361d1f21b42ebe3035737ce13dbc1ec4542b8b55d84e2888fceb7b73928b117d485e6f3c028d9a5cd74c6206d4568aa8566ca3fe6a97315527edc5bbb592f6267afd2e630237f0a10dcc3e9c229d5b59bea9fefef4d73ad90e42b17a0f47305e1b35cc49266a506984582dbcef5b0341e45c4c0cf5b99c24838217ba466b738798d75e212129369a1aa6b91c21789c6ee79899644bd98448c0eaf11d6b2a79ce68e56fb343ddf18e24d3cee9f3d0a5f802bc86d3f86f0fe798c1193e32e2341e7b18709c1ca0b377f7de3f2816293ae154adb61b6f8d9678cfd5bcc689d357e142eb4d294da73970920fefc81f24bce6608c9eabdab4269596131d8878d80591bd848277058150f14b2daee7dce546c8573c1c1cd161e21de4cd5bc3c40a86f8ba4705d33f538d1f613b92cca0b697f3df2e3f3faeede152103f46075a9cdda8ddd9297e62b8c252719b6cd809cbe922972b7f6fae66f24c51f976a518738829223e33c8e47aa7beb47e6f84c5b03f89ef100b226e9a041b9047b9c32bc3cbfdfe75abbec5926810b6f0efb4f805807cb4195062f8f8e4e1220bbe52a763120d95aec1fbe1a085dbbb40905035dfd744c26c2f56881a33ccddb75404b0cfdc64a12764a00a152d8d0fc851e6d24cdc65ebaa35a604dda2bc713722b4cacd467d2b7f215b28d16ffbd2988eb80fd6470fba6c2b0c2c5a129b6205ae3a3c659dc395fe30834b5461f1248efa5701d71fa0a03013bc23f1e46f561ca9861c0fbd88027f2520dd5b2dcab733ca973fe707b146d7990ed56dd902888c78b9875dbd85c382015ec4ae412f6335aa5b6b2f4d47c8d62f1430f07f339ae78cba53833f203fb64d339d6d9628bfcddbb3623637dc54ae940b160d03a3a92ff1010fd62e87e85f4d0eaf09f7db68f24d8e1ab56b216aa2741556f6e790fd7caba447ef2bfa7ae37c539ae89af1ae61a8e0f003bdd0b694acb6d31c7a941d6dba9f98653df37a8eb656c1d984b7250b744360b410c1c1ed34595aa739b0102783985145d4743d49cb57d03a78bc632a54442c673c2d15c5e36d35ad192fe6c3b6f9e389a5aff42a1f6eea1ee9376e31eea20ae15ea07f1cd129f25b3cfab33dcd2d3936f59ab911cc305cd669dc4e9545c0b057f01136b89b95ad74d3fda073f9546b96c9499d9300e7b50edd6c12785597de44431d12622ddb13ea43d84381be223370c00bcc4b4d359581e2cb6149ce68a0994c965d5bd31f957f8a7bf51b91a0bee82ff1245a82d35fa32d64df3cfc92b7a7ca0db6279ffcfb905b071baefaa82bf85e49fb9320d6ce1849592c6a54b5703111c326fa522bba8c35ebeb2507c053782cdf0fe95c91307bda2e138cf18050d8ee2c0386b025f0c5f415fedfcf9f062bb20e366cacf9ebc3b7f0a1ffdb7b9dd2c2888d8dacc44fb41c9bc8217dfca83e74d1dcd6c1c50dbb88d46f7714ebd8bace671c2481a7891deac7efc3369f72e746ffc8e3bcdc3e1fe84bc205249f79169be145eeb8d10eff93da14714a0f8df6d41c915814c4671c6fa6962e2c082bb2a684b5c89f2d42c8aa3f71c0b291fd7c07d91c42e5783074dc68663ed8bff95210613bdf0770267af138e70ad0eb785d224e16837cb07ac34a41aec0b3d087c59975c8be68574039a5b6f158f683ef742c8e8fb88563aa3dc0be3dc60a65d77940271f2ba851c74d4ce440b825a738b051507a732df09851b4f5b8c6d969f68a55818ea3f5729f341f845e058d01577e60d68c51945f2ee7a15d084b6dea55724d1cb0aa8102f0d353b56c4ca4236bc9cd3d6c0ae046ade9a5cbfd70026dff650f2a66898c94e1874fa5422a16ad5116ad48f5d37a42800ed50fd26306965382a808edfd3c178377d0f973459d75e54d8ad82a1146880b86bcf60568b57676c924e9e175c54a71804c55694c280f92d0629aafd5378a4b2bff19716063bd735b1c86f5ed6bd7d36d6e8fa5336b12f5efedca72081064468f563fce2cca8043696f5907b11829244ec0eab5a8151e67510f3708c9a51d661da5b72e46f0d5c732923ef0bd94984eed15033ffbe83dd697840c726c603ed2a918ad2d0f21c6418447aeac4d92c36f22cca91049669751267c7adb10765516cc98fec15a9744a8218c17fe2b4d8ff08aefbc0b02f498e3b4bb49afd1814f1b392c7f20c10214547c8df337bf359bd2e2d590f0043156e62c451e14c21abd0fbcb5633234aa67864043b1cea6f86b087523d3eea2030cc20591df7499f628da3b6871f84fc13b47a8d61866d6d5953c2822851882655db4eb9b00c0a23ad205fa55bbcc7e3801ca60387fbf317cc1a736f2eedca7ffd6a5ba5be569b2caaaf7bcb93194cad2e42891d032b92ad91e63da696ab0183c5876178501b11c767f4693f45618e2b040d10ed6c500a8f6e7e6115d1678e1d8ed51cf0cae80d536c50c2a567c4118bbe290e7f9bfec79dd87b8c3e200b8fdfb992364d35d3128fd0d86ba647b6ac41aee5deb9b44384368b78ebb828a56b8dd86b9d4b01bcf838ef7cdb0492c831668cb1123dbdb745822499d671d6d3746683ac4a6cd076765afcdec86d78e57ca6d28e13badd3c10a35baf12e411368bf3501e6e617cf0263062652aad22b1f5c8c597f1021428af69ce6fc2df1d4bd9c722c0415e54322471d827fe2f31ff61bf064c3c31501894c371c5a55a097e5e32b8a1778a92e523a73fdcf7d45c552e23e53584ec248e2a6c94e21c7b62c77323fb832b26afb43ffb3e5a420d16ed3668fb3229a0167767666e70093e95ea341f2431133a9859a37324213e62acf76dc9e4c496e55029cecad09327bb9fcafad2ab1d27db16bc8fcde24160e03b12d837e3e0393bddb0f4a52225b46a419237fe282406c22a30ede61cfd53373b1d0468da5b94b13a0d9641cdce5e3b489276c533f63952f4d47d496f5f3b6144a7d580caabf0b557954fa281fefb830e8d7be61bf4e5db588e4385f4b868a2c026eff04de2372fd15fa4ff2f6b14167de2e13f46f0d3a59d1130c46b72029ac1296bfb0c6a991081d0257e2ef655473e4232771d69008e22ac3a40a46d80fb8d2cb904bb1ca5b2978d44aa57c73f250346856ef0058e92d37e2d9cea48a8938ae7b396d876008cad0d21994ef0dc7a5eaf138c3439ebd9bc10ab1496ce1564fb6dcdc42bca449b368b617f9da7806d4067676b24406a453beb46696a5c6ebac4ec682915242a2b06a96a21a42fe8079b4c96adbf45589946ff785ca99b54f9dbdfbd4c0b4901631224b04c648e0324aeb92a934de74c5f994760f2929073b5ff6a1e34ee3265c551bc7255b4eb9d5b7cd48", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x7, 0xdb4, r3, &(0x7f0000001a80)="58fefa756d76997082b124ce763ce2cbae914f52123edca434f95efb741a23219201913198e12a2cdbdb71f726461e6f90f5af6e117a2bb72d7ebfcad17c5ef64bed66729c464bec18ef9c13d201e69c05e19d8707b4be250e41cda3c282ed349a08675a344d7705a22a15c857bdcc27e8b4c90a92c8ed35657eb5b86c7c172480063ac405ad9df3694987bf62cfef4c1a581efd8f56f00ae65d6dca2c9fae41feed17d1e7399ccb5a7e47d92e0a01c0c731f57e4ccac7968023195ba4c0370fa3cb942161d8c81e18a549725dbd86e550c6b6f5c3cc6e78d1f57462f57d6d571a8f75ed", 0xe4, 0x8, 0x0, 0x3}]) io_submit(r2, 0x1, &(0x7f0000000140)=[0x0]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/clockevents', 0x18040, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') r6 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r7 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) poll(&(0x7f0000000000)=[{r6}, {r5, 0x604}, {r7}, {}], 0x4, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x1, 0x81, 0x0, 0x0, 0x7, 0x8100, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x2, @perf_bp, 0x50004, 0xffff, 0xc000000, 0x2, 0x21c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, r4, 0x2) [ 397.868274] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 397.876185] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 397.879477] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 397.880545] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 397.881967] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:19 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) 02:34:19 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:19 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) r0 = fork() r1 = gettid() getpgid(r1) pidfd_open(r0, 0x0) prlimit64(r0, 0xa, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xb, 0x0, 0x0) 02:34:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, 0x0, 0x0) 02:34:19 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 398.084413] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 398.087349] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 398.088672] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 398.089767] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 398.090884] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) dup(r2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xa2, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ba31b55ec54c5047a788baa8f2347dd8b522f4bfffcf0e33223f42a52b935ded8d9bcdcf7e700dfe39958608b9e084de9cbdbb2a18fbbc2fc94f207b568a1e40aabb1a9aa252e25359bfe0031078377a75fc23a0887cfc17c8e047510ffd92351ed7c311425fc032e748f3d671504f2bbb0c7f573c65fe9c8f2ab2933a692bda4305045cf0d9b59276fcf76a664c8eff276604025aea765bde6c6703522479a52cfc9ef2defc83fe0fe51e5200d18c2f94b84ee9499240715aaa68bb41d2ad37cffc8752b6930ecc814cef9a25d8dda6549388326490aec28e781da8781ae4618bf7a4bf38", 0xe5, 0x1}, {&(0x7f00000002c0)="63e7f3b17121869d16e5ff68c9553d4a11959c13caca6c6d8e147c2814fdc1d79ce6bb56175313df8aa027c23fcecfd91782292c46c69c20772d4dcefef4bba09c7681c3602ae118bc965fa9110c966da4bfc22265a4727a4f263d8ad28cd10eb0f093859ade0892a0447df71bb07dac2bf92d008507c410d5eefbb1cf355c5f758f04cdf923846105ac", 0x8a, 0x9}, {&(0x7f0000000380)="8ba96e294a636f6222c36b66bcca60d5395742ab2b3fa0274a57fc6ca507f92b2d7e", 0x22, 0xfffffffffffffffd}, {&(0x7f00000003c0)="8fb6832d9f13f5f00dc68dd467", 0xd, 0x3ff}, {&(0x7f0000000400)="519742255784bc611b88b4d45028d6125c612225faca140282c22b90a2c6a97fef21cfe55d5afc9a964513ee32d4a03ece62baa328bada", 0x37, 0x6}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="756e695f786c6174653d302c6e66732c756e695f786c6174653d312c6f624f6e000000003d002c61707072616973652c646f6e745f61707072616973652c008ee9f031e8603ba183aff2734a95537235d264d0446700903eaa79527d7868367b50f58e51fc193fc531860725c875d54eb74f3ccedff18c2480d6586fe1a8d1e32279c7c4dfe421"]) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @loopback, 0x3}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f00000005c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0}}], 0x1, 0x0) 02:34:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000000)=""/106, 0x6a) ioctl$TIOCEXCL(r1, 0x540c) 02:34:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:28 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101901, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xda5, 0x7, &(0x7f0000000580)=[{&(0x7f00000000c0)="db80ff7915ec5f09646531378a243b1850a0aaf2cd8c6f1aa7a9f4f1a25b19efb8def8fd192166c4176acfbe8fdc8a7d2faabe14173af35dbbb940b6145282bcd1d5f45c00282f08a95c668c04f533071c09d1494cee7c00b7f6503a26ac526d572f4bc9d50b6f15a8b2f60e557b2a0bc7ecc57886", 0x75, 0x2}, {&(0x7f0000000140)="30ad49541d0722ef6651fc81db702a64f7ebcbfebdc573878d5c5a1a3a5fdd15b5432164926f7d2a7949c93a0ee18d6d6201c174425cc3e4121abd97be8fbc0ea892a7d38ff7253efa249000792302c5d5989b586efd8ee39dc608374af30675f6a0e5c34412d571eef8e085a90c36eceddb8be8901d264019eadc989e1605894d28bcec60b7df79c11fac989d269ba8d085681362a94dc80334672bb7e347297c2a20020445fc7e94dff74fbb1c4e7a36748a6ed8d746b8073d019917191c", 0xbf, 0xffffffff8d9eab5e}, {&(0x7f0000000200)="cc337a40f20ca3c71ccd0a7b9a2ee6e8cc46be28fec0114c7c20eec0d54ffe8fccfd6ed8d980f3515c76fee3facf53e3106637d38f86722144dc32d36f8ae7156a00ee14b99a4e3784802e7c7207237f50f7890f267d5eb78f963a8d860e17a6e4295f16318b2df210e685563374c869c6be1764e454325873959183e67d6295a7b26f18cc10356a23888bbe80fbc38958d47fcb2402279e9fc68007530b2f5f9d5e4ef835e3d44453c7c8e64f4b6687e1b16ba9dd972915f2", 0xb9, 0x81}, {&(0x7f00000002c0)="8c0a42c239139698b51cc5904de43c0df80ebd4cf7e5220953cf98d8973b979e167127c016d39f14bac06a37dd030c30db06198b379e1a7458db5eee85c14cfdc863145e19f258a33d14fdc859c5ae3b6a83ecac1319a29ccd8391868def4d3277f6b323fb299d1ccae18d62bf183775f25f7a3499e30a3a6ffbfc1b3618fa7b36f6636c10f051ee9a46eaa97d44d12341a5290c1d0a095a758b7c9b362b28ad5e15141cb165d4986883da748b185dda79993ddede9a493f324f2c3ee3dd1278b525b9607e3d1f5f5b090a88eb5a88453e2e49795a89872aab7b25d1f74564c8fee4", 0xe2, 0x3820}, {&(0x7f00000003c0)="499afd3c64ad780538d7c244f3609914a096c23fd80bde589e584ef2303c044076566b9e9ab3d46a0da28ebdf316e9214e5d6010bde456e850531f98366c5fe0cf858ba48c67c7a5d918b2ea2baf621763ad1967c8f4f517202f379b98f549cb1e5f630351b0", 0x66, 0xffffffffffffffe1}, {&(0x7f0000000440)="f263d5d613547215267c4bea9686c5eeb9a6317aa172dd43fe2ee21848756d590ed353c36c96efbf08bce28127023a1dcf2f1398274251550f0370bac7158f624a784c6433b2ccd339d813d60fb963840372e7d55cd525682d86c2583ed3d8045716ccb35319312f3b1047222c1e7f22f4434a4c45", 0x75, 0x22911c99}, {&(0x7f00000004c0)="565b765af8c898b1df0ab5a71e824950483dedd8256221c75dbc96f2c015ac564a73f9136defda6b151e5d1878682803db5fad26242d3d36cb33ead2d9ad9f99e728c5846aabe93f8e962d4d3defda737922dd2c34c00cf48716d326eb429bbe7d2ed383d9703b0cf9a1e198397615eaf91518c244601d0b094f7b61851ad3e0a600ec6e4614ea50b19e082c48472300b1005be4945f4b573730cf1b82", 0x9d, 0x9}], 0x4004, &(0x7f0000000640)=ANY=[@ANYBLOB="2e2c7d2d262c2f6465762f70746d78002c252fb2232c2d2b2c2e2c2c66736d616769633d3078303030303030303030303030303030342c73757365723d2f6465762f70746d78002c61707072616973655f747970653d696d617369672c66736d616769633d3078303030303030303030303030303030392c61756469742c7569643c", @ANYRESDEC=0xee01, @ANYBLOB=',fsname=/dev/ptmx\x00,\x00']) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000100), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000100), 0x4) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES16=r4, @ANYRESDEC=r3], 0xfffffdef) close(r0) 02:34:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x40}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000000c0)={0x7, 'vlan0\x00', {0x9}, 0xd97e}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 02:34:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (fail_nth: 1) [ 406.819395] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 406.819762] FAULT_INJECTION: forcing a failure. [ 406.819762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.824745] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 406.826315] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 406.827595] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 406.831075] CPU: 1 UID: 0 PID: 5663 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 406.831094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 406.831101] Call Trace: [ 406.831106] [ 406.831110] dump_stack_lvl+0xfa/0x120 [ 406.831130] should_fail_ex+0x4d7/0x5e0 [ 406.831155] _copy_from_user+0x30/0xd0 [ 406.831177] move_addr_to_kernel.part.0+0x40/0x120 [ 406.831201] __sys_connect+0xd4/0x1a0 [ 406.831216] ? __pfx___sys_connect+0x10/0x10 [ 406.831234] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 406.831253] ? ksys_write+0x1a3/0x240 02:34:28 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 406.831266] ? __pfx_ksys_write+0x10/0x10 [ 406.831277] ? irqentry_exit+0xee/0x650 [ 406.831288] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 406.831304] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 406.831324] __x64_sys_connect+0x73/0xb0 [ 406.831339] do_syscall_64+0xbf/0x420 [ 406.831354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.831367] RIP: 0033:0x7f4dba694b19 [ 406.831378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:34:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (fail_nth: 2) [ 406.831390] RSP: 002b:00007f4db7c0a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 406.831402] RAX: ffffffffffffffda RBX: 00007f4dba7a7f60 RCX: 00007f4dba694b19 [ 406.831409] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000003 [ 406.831417] RBP: 00007f4db7c0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 406.831413] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 406.831425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.831432] R13: 00007ffc17c09b6f R14: 00007f4db7c0a300 R15: 0000000000022000 [ 406.831451] [ 406.860844] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 406.861914] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 406.863199] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 406.864289] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 406.865348] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:28 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffd}, 0x40402, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000480)={{}, r2, 0x4, @inherit={0x68, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000004010001000000002000000000000000ff07000000000000010000000000000007000000000000000700000000000000ff00000000000000ff000000000000000900000000000000a4eb00000000000000f0ffffffffffff0500000000000000"]}, @name="b3d9067816ca249aa0ae0ecef5628231e4744528a7d94fb68b7db9c3fff339d82d0c42b573681c6f15d35b89fbbaa33c9e5467f94ea03b987e9d1c6a2681768fc405d7baf37c39413e7c6190d917412358f175b0b59bb51334fb4da85eb45d73ceac16a616360c288f9159b18a16865b9706e582c4eecceef7782fb79a822c0c5acb8194de85561c77ad28de92a612cfb8117ea96aa4003681659015cb16b82cd651e09338111446d1bb375db9d51849315907dbdabdc1aa9887ec447ab15d598a75f0f4950d359ba8a2f0fc084a1ca94f041679b1c93264fe0fc98dc3051160815bae27acb7d0c06c9fd326d3fb133194ed863fe5406295e8d3e3f48184fbdfc70409d2545d7712a215f6ca9d6a24608facc35bea7d9f2968b8471010f557367e9b604a4b082d6c02e714c8081e3e8340d97cf629867d33c096f98e3abf3d98bcce4157a818210003a42bd928e544a2b8a48a08f426251caa7540ad3d1ff05e92119e1abe843e3c5993199a2668d694153ffb48ec9d2e9a6e3f8ba4f60f70aae57c6d3d7dfef27133678d590ebfbdfc8da4be523642570b46a36c1927dd8fb949fd7e0addbe0928163fd3c78122e4c8812c5901d6220fb271fcba6e9327981fa625ae2a14b855b4e03e84540e700261366430842287494b92482ac3b51303144c958e021b26e0a8990d8fbbc8d16b95a92c9bc614afe6c38030a95e6b3e66c3faf718c550101b4aec0469c3c8514d15d10eb7cab315423619352dcf7ad5c0820880da6699c16f33894d4d6f864803bd1355f2b5489863db7306a4ee4e1e8124bfcd604ecf98521ef9e66dbc4ad9b74cd05a894bc4b1533d070ea232992516f77cbf1ca0d219c1c6cab843350fc050d5d3d83a45f30d3bcab91357188d604004a158f56eb0090d446dcac9865f9a4b0ffe4c75bbddb997700e4fd2b4da844f8201655eb2cf6f849587a73345306900e7abbfad34a692d23d2464e8327cdf95b27598d27038e34b9e43cbad4485198330268ca87219e0a64d2d10f61ed63b7d5d2cb7f90f0a78a4c0f9ba26bd69c8e2bb25cb3ef8a71c5c620d2a225bd181fe42e789c0d3d729f5b77eb78e62348487981c02d2f38312bbb3d2d949e37425aad78ac2034cd7e8b0ead90a32361a967f0f861ef98b30cb266d4253da107498a88418c27d9e6d1958d07a462c78e961501611450c458e322e3af1dddbef4045b97f50da2ddda83bc3f552fdd83f9dbe86a6a4401a071d7243297f12c8542b67f6ce703323864e217a3db2cddc5f37cce381dd1e4e1ef52d3ccedb675804459d3207de40a31dd4ffb99a143a29fa991f2708268b6d53d8f58c2e0ac855716521c792f849da6cb8e4ce2bd13dff0f9a5374abf270e0bf0d677db9dece6fa453f5c368ac94c926700b51d9b5ba6904de94370a01eb0a2f526184ea6365d44e9af9812cb8a4d51cb7b04473a2e1f1a47eb64a806e418b97f5e6db66b43926218acda32ebecb2ce7abd9c79bf2562d58547786e13cba4725d42134423203cde8491dabcba5142114b21174bf7bd20ea3e2e02d51b1b388914e53dcd80023a598b750244b0e2a0b5c55a97d1a3f5ba0a3408e5b8b8e07a4e1f3ea72dc2b80cd53155d408e267fa6b3c88da6cc76cc814e9c2e240a2462e96b1eb1fcee4357bb2a7db9f0a34e3d6c1eb7474c36b44923a3defce90362678b68cf273dc1a8b76dc220af17a3c7432c3f6c9abc56e74dfd6531b6f69a6a338fcd7af4af873f28558d6fda571504e8df91c91babeb83a754cf3e9f04c2b4224fa7df077c6029876e44892e16396f609dd99fd6f60c9297ab04b89ae02cec66d87bae89ee69d78a136e831369bf1841b1c37a41851e31617dab3a0dfdcabb673d45c75226f4abe8750493d2d5b39835c9519e78e12dfd59c137b02cd9d197e40dc8300f7382e99e2de025e12215db718760ba430b5b908f86da1c3fe8414de11d8e6f105c4ff4883e15c8eb66e54d91547cc9a4d54be65db7e8ea956dc7ad1f0bd77feefae82051ddf6e744b33dcca10157847782763570cfa48bcecf02e95b83fb51e5813e138f3864e9977c39dd904534a4921d90bf81f70a81a655bce3e14a4ab2b0c33b69afa128cc278567ce8eb9ddeff43161541b878c59535c34335306d4bf06ea8752dcab996d70a7e202584024a799a2919b52810763b0363dc5ddb376cf2b0501d4e70811257f2dd976c6d291607db5bfa6d79aadc1f7bf5b30f900bf2af8fa64eca105d0a0fd75aa5e848dae51192cdbaf15ec5498caddd69fa2651cb322634593d1a85b30315992756c00c47975821563db42ab966f61915667097c4696aabf94b6b010a7c06da70d79c8c86736ac4fa621e1938d4fcca29f94b7289efde6084fb4450005956112dcce34bde9f3ae75ba2ff5c0d6149664f155334fab6150839ada0886f5b019de2cf4b7d8a5ce00c199b33379f244220b418271391f166f48108dd50d67c1357b3b8a9513d7587d3a08ebfe3d56f131a9cab8f9d88febe275b8104505454af6ab72a072be1b0b3c9fd1767f8a9656730a4a8ec10f4ce45b4b480815a2b77b54fe81f11d20118b82ec4ed14c39c71c1a980c05944c851004f4e7fb640988190dc443108acadbd6e37e0b41714370a5bf2accae2c6db6cd7a55631e597582af034d363d7c04f3a92ef5dd3ed660f6115e45f84ee8af4e67de5aa0774ac6bf002f7ad2082a83bdccb4dc201262ea1da48a280e4bbf901b8e2a57371b267465620365d869e656a1802be46210ecf62cde66f8f6e99765cc5c759814e80f1aa1f82a72d678b5ee93b6bce11220b425c6def266bf4a8326e9021ef44ad8c9fc6558296f9c95fe3bddf46156a6c775bfa2d589e29b46621402d2419d8ce6e1e582092efe4bcb0f7d50126118e588b5d1d4154de006f59cc3a39d49502f09da69211390519a90c265a269741acd3f1296490c3737dfcc3ccfd0d4c7eb9cf0fa19614c83e826c6e38341b77159106f88bd5de54e41174ae449d0c55e365ab7dadeb41788c2830cd2d307595e15a8e525bd25b9ecc92aeab34b2ff8ab03dce550fce024ead50bcbdf482c032685313a250cbd7f5b6073d3c7557cb830a17e26e302e8934fe9ad9cf911aa476ada6d2370bf3e4338a3073d85997904c5beb50a6b1d288570dc64f7ae10da4f72d9735694a689028981d9dff5fc843e765198c2305be53385ffe08713eb5d9551c4162b6b564c32fbc90454be9d39c4fdb10becc87b5503e765b1cf044b08b048fccc81a6b8fa196e1f537e1bbadfa195fcf2ee0faa81edf379d5bdce4191a45ee3046283ccad431ed2d30cc9e17b11b285a8a24c7a587e8873c275df13284e0fd0d79b2e500b93f64da0209f736e242c2a6a5674ce085490c0e1890800550c642facd94171352822d350441b1eb762a4a71ebe87dd397ab76eba470ac4d7b1e5f9d5291f1818fabcf7db9f18655931f80e809544ad25cb439f70fe9da22c5f363ce3ef6953a8a8bd1b97d909b0de249dcdf8c799f26e42906fe084417843a8faa2fd8b6a622f86cb692a4da6fc78b9a91350be1c53a6b97c5c890463b3c8391b9663faad4e00705c944aa0172e7987ed88e03d9fd1b84f97d333eaaa601d64a85fc1f8e2f55abcfbde4f4834d0a87d485ce4dc9b47b1258b4498096dae719b82a71ca713d5887454b3c358e4b743af99a8bbcd5ee824d7b3bb67d247a6d5dd68584d1d61ef4fe26023ba248ae1e669eb9bb6b981b05a39924118b09df085d03c11b21f2748e4553496b67e4cac9e9e5c933986426384c579bc6312a9bd882c7c71e73155d0ea70b1973af617db999e9d82eacf4381659be3e3bebe22591cca8b087d0953a293730c5be955476e678a9690f4bdce1e6b306b40286aac100a3d3a45b21e84bfac5b0bba5994cf7171eeabd7884d874a86195cd6340a96d2009e3edb4e75cadad30219f02f505adf6bf9da99bd46fd95e14f59093044b1c275e3625aac50fcde14f1f39f11b8832364e2225e692d160a7bcb9860d6fd590f1f1a57bcb27883254a3aa664248d05f1ede7ed1a694d03f9080d73353ad643414d9474afd32724aa1a20a0b80f266f806bd28f74441598b6f2374811f3be6f92922e66b71c5c717cc9c859e6c0346a7c911acc2effc2c9a936d8cf095485bfde51fc8160f6bc52f0a7a2974cc92df325cf3ab1241433acae4e72e4740d190a3f29a96e751d18204e155be883035e32907d49f5f55ff2d85cf62334eee4f2559c7accb9426a362f03468d04bb8544896373aee4590439fbbe3963c9c6016459a62356e88000a865a045421137754d70ef03f8adbf709323efa516a18aeecdf3863fa236bd89279aa53e9e6bf1e23af590e612b05a2145436a21a461d3235231c6cb5f851fe9d48f45914634c3ad7cfad1c8c92ea77bcfcc29dfc6972f688740ce2a087e5014179b036965a2bed55205bdc93a1d54ec73f8dcfab1f3d3a2ba878ce51332516c270bf372ee16975a278f1810db8a4b94b8a422a1540df1ef2de2db1814c2e8d61297511e8b8b9362393c038eeaa53d2e54a577c75a5eff1e10d4c9033892ff427523fc90ae969e9897fbf0a91544252e9fc97a88a79d0134a14eb761ba5aa814873bbcb12ab9ea6c319ff33bd760f2c9ad9ab3c9bf4a67ce2f021190ef20cb8a590ae52eebfb03bd1840f345c0d9d24f4429ca3b2826cff598a68dba8e012ac9c435b662b1718bdf363b5b11d5322a7b574505d6a9df935c8f4bffcd21586278a604efc52d5fbb68f3c4a3b577360d6d711f155eed1c69ce444efa7007a47c1c45a99f2cf8b7c780c367acc805a23b9711ad7c53c36ed20286147aa02b95c9a5e9510dceee50048c26deec6e08719b7e823186be0b4eec95b336af3267973dc417deee5d47b9317ff51ed0c3052e2b36d90ba05f91c0c56aa57b8a970299796452ffbf9768126d268d913f9c92acd715db2c1533d9c0895d082a8d1e0fcc61829f1b9243e28d5d369e1ee0d22de95a6add31719480340e6f2c10f0f0bd3856af1c9e4156610c1394c155d14c421434ff36085858135f081cc7586a9cb335f7ea6f933e2624ac292d282924d6af84601ca1202bd9979f567e34d3b627ca189d61ab5b8c92da6565d8e5f2beaeb27b5c9c74643e538ef3601fc199e7fa9df737b5d3126458702492b63e3352f21dc6150f3f344fb6ce83a5947349a64efec22b6231b7eb1bbfb5510df716fb8c5186b60fe85372b22fc17457bdecaa4bf4285b700ec8c3cdf2cffc698f85ff78610f120c9040bdb5f47722b9bfc349d841564343d1dd7505014f95186f6244c4b45786ec5c2ffa718b3bb528ad197752cee319fe20ce9f044a711ab1ec203b68a95b611a26c2bde750d47c8b187a36f49416bf6d012f4ffd1f149647ac2f9eda96fa67aa5494659bb4602a24688b580adf4157aa22329907eeb1f8a017b8027fe1d96496b4ea1be6c326e0ca7ce08ade305898e8575ed25693810c871e280f8e87bde24bfb5f244bdd423394daf783aece7e05b6a65993294f91b17960b4dfa8d36f477bdf9d4d8d7e3f1a2b5dcbeee1f44890da44f59700285a62dbd0ce5a7c80293e83a8378d95fb5311e059f7e41de5b3ff5d14d8199f11ea2a671b61a121810295cd8f2426b0ea5c9d41b88af6061ddd2b58b6306db66cbcf7e5206b8b4e7a7ced54f04e313874d4521b2de903705a7efc"}) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000d13650886b720d374682f75370053c781100ffff000000000000000004ff0080"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x37aa}) socket$nl_route(0x10, 0x3, 0x0) 02:34:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 406.943802] FAULT_INJECTION: forcing a failure. [ 406.943802] name failslab, interval 1, probability 0, space 0, times 0 [ 406.944899] CPU: 1 UID: 0 PID: 5672 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 406.944915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 406.944923] Call Trace: [ 406.944927] [ 406.944932] dump_stack_lvl+0xfa/0x120 [ 406.944953] should_fail_ex+0x4d7/0x5e0 [ 406.944978] ? __inet_hash_connect+0x9f9/0x1b60 [ 406.944996] should_failslab+0xc2/0x120 [ 406.945011] kmem_cache_alloc_noprof+0x80/0x760 [ 406.945035] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 406.945060] ? __inet_hash_connect+0x9f9/0x1b60 [ 406.945076] __inet_hash_connect+0x9f9/0x1b60 [ 406.945098] ? __pfx___inet6_check_established+0x10/0x10 [ 406.945117] ? __pfx___inet_hash_connect+0x10/0x10 [ 406.945134] ? lock_release+0xc8/0x270 [ 406.945152] ? inet6_hash_connect+0xe1/0x180 [ 406.945168] tcp_v6_connect+0x12d7/0x1bb0 [ 406.945187] ? __pfx_tcp_v6_connect+0x10/0x10 [ 406.945203] ? __pfx_avc_has_perm+0x10/0x10 [ 406.945227] ? __lock_acquire+0x451/0x2250 [ 406.945245] __inet_stream_connect+0x3a5/0xed0 [ 406.945260] ? __pfx_perf_trace_lock+0x10/0x10 [ 406.945280] ? __pfx___inet_stream_connect+0x10/0x10 [ 406.945292] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 406.945313] ? __pfx_inet_stream_connect+0x10/0x10 [ 406.945324] ? mark_held_locks+0x49/0x80 [ 406.945340] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 406.945358] ? __pfx_inet_stream_connect+0x10/0x10 [ 406.945370] inet_stream_connect+0x57/0xa0 [ 406.945383] __sys_connect_file+0x14b/0x1b0 [ 406.945401] __sys_connect+0x161/0x1a0 [ 406.945415] ? __pfx___sys_connect+0x10/0x10 [ 406.945433] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 406.945452] ? ksys_write+0x1a3/0x240 [ 406.945465] ? __pfx_ksys_write+0x10/0x10 [ 406.945475] ? irqentry_exit+0xee/0x650 [ 406.945486] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 406.945502] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 406.945521] __x64_sys_connect+0x73/0xb0 [ 406.945536] do_syscall_64+0xbf/0x420 [ 406.945551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.945565] RIP: 0033:0x7f4dba694b19 [ 406.945574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 406.945596] RSP: 002b:00007f4db7c0a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 406.945612] RAX: ffffffffffffffda RBX: 00007f4dba7a7f60 RCX: 00007f4dba694b19 [ 406.945622] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000003 [ 406.945631] RBP: 00007f4db7c0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 406.945640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.945649] R13: 00007ffc17c09b6f R14: 00007f4db7c0a300 R15: 0000000000022000 [ 406.945674] [ 406.978520] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 406.980181] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 406.983584] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 406.984836] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 406.986719] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 407.020103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14033 sclass=netlink_route_socket pid=5683 comm=syz-executor.4 02:34:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x75, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:28 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 407.091199] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 407.092653] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 407.097280] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 407.098530] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 407.099723] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (fail_nth: 3) 02:34:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 407.124214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14033 sclass=netlink_route_socket pid=5683 comm=syz-executor.4 02:34:38 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:34:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:38 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x14}]}]}, 0x24}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, r0], 0x3) 02:34:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xf0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100), 0x4) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x280, 0x22, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0xa, 0x0, 0x0, @fd=r1}, @nested={0x20, 0x2e, 0x0, 0x1, [@typed={0x14, 0x92, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x4, 0x28}, @nested={0xc6, 0x76, 0x0, 0x1, [@generic="dd0f42a26a245a2e181469f4725d1cf8fa5efdc9f23fdf9fed8c1e161f1cd68f4aafaeda60de5e6080cf7f402068a4c62e604ba2f03e6dd8abd5188c9af320890b08ae9aab4c1bb638ae30b7c9a44b0b7ead59ad9fb36b9db5949f9f208d1149cb957a5227463597908f815d0764a56a488c49631b216518813ecfb2bd6165d81923a685e84e463ad85a3f06171dfae872560feb9c2993a26358b0968f7e75eb13dcfd52d042ed5aa1a8020a5b123f16159e2ce41f6b28b0cb58c368de7ecc345582"]}, @typed={0x8, 0x265, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x4b}, @typed={0xa, 0x23, 0x0, 0x0, @str='caif0\x00'}, @nested={0x164, 0xa, 0x0, 0x1, [@generic="8191392428513d284ac2505177abd8a55d5227c5f3013e2d1fb65e003aebd6ee474c20cf7b164f138f210a7d4b8c05e87670afe8d64d616733ce8829a2478feb8297e2ef49ddffcc4df548ee25a382cbcf2fd451e61cd733f182e525e94d8061e63a28a00ecaae7fc749f9ca11e89a179390a17cefd3b9705e9e501f108710d9357c5b12fe07eeb2d79d308dad30e5c3e5f41c", @generic="55bd3a34fcb2c8cd9956ae71d048687bd743e7", @typed={0x7, 0x23, 0x0, 0x0, @str='%%\x00'}, @generic='0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 417.545792] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.548529] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 417.561633] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 417.564240] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 417.568404] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:39 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 417.685898] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.687149] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 417.687652] cgroup: fork rejected by pids controller in [ 417.689817] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 417.691819] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 417.692945] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 417.696192] /syz1 02:34:39 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:39 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/clockevents', 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) clone3(&(0x7f0000000100)={0x2c8200100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 02:34:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:39 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 417.799375] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.800862] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 417.807560] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 417.808700] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 417.812766] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:34:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34aa8a002c00010000000000000000000c000000ffff77aa1cbaf0001800008e14006300fe8000000000000000000000000000aaf98566e1d67fb39460ff95e4bf52cd658f712240f868cec04c9c52177449d68160c3f4815476bc5db995bd04008f70939dc4487adc94c485c9d40ba5f647f3ac9ee0dfd658d5de3a7f21749a667dfba5644390f4e325cd2b536129111a06c85a988446165300219c1a59f6fd6d3a3c048b2a83efeb877b078612a4dd4e79d29ec6b8ba02179affd82d0f55cfa03fa69f7394cab0856d"], 0x34}], 0x1}, 0x0) [ 417.972294] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 417.973303] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 417.973852] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 417.974416] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 417.975001] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 417.977850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 417.979488] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.980963] Buffer I/O error on dev sr0, logical block 0, async page read [ 417.997943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.005315] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.006363] Buffer I/O error on dev sr0, logical block 1, async page read [ 418.008935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.013108] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.013805] Buffer I/O error on dev sr0, logical block 2, async page read [ 418.017303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.017768] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.020037] Buffer I/O error on dev sr0, logical block 3, async page read [ 418.020648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.021592] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.022353] Buffer I/O error on dev sr0, logical block 4, async page read [ 418.022946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.023426] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.028129] Buffer I/O error on dev sr0, logical block 5, async page read [ 418.028743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.029708] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.030447] Buffer I/O error on dev sr0, logical block 6, async page read [ 418.031072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.031532] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.032269] Buffer I/O error on dev sr0, logical block 7, async page read [ 418.033103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.033654] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.034515] Buffer I/O error on dev sr0, logical block 0, async page read [ 418.036271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.036708] Buffer I/O error on dev sr0, logical block 1, async page read [ 418.037559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.038086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.038575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.039083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.039582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 418.040122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 02:34:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @loopback}, 0x1c) 02:34:50 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x0, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:34:50 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:34:50 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:34:50 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:34:50 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 429.404370] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 429.405655] Bluetooth: hci7: ACL packet for unknown connection handle 2745 [ 429.412532] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 429.414590] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 429.424300] Bluetooth: hci7: ISO packet for unknown connection handle 1106 [ 429.425613] Bluetooth: hci7: ISO packet for unknown connection handle 1106 [ 429.440205] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 429.441480] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 429.444240] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 429.465819] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 429.467475] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 429.476273] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 429.478179] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 429.481001] blk_print_req_error: 7 callbacks suppressed [ 429.482636] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 429.485507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.486393] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.487643] buffer_io_error: 6 callbacks suppressed [ 429.487656] Buffer I/O error on dev sr0, logical block 0, async page read [ 429.497816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.498965] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.500520] Buffer I/O error on dev sr0, logical block 1, async page read [ 429.501810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 02:34:50 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x0, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 429.513978] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.515520] Buffer I/O error on dev sr0, logical block 2, async page read [ 429.516795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.517793] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.520680] Buffer I/O error on dev sr0, logical block 3, async page read [ 429.521988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.522966] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.524428] Buffer I/O error on dev sr0, logical block 4, async page read [ 429.525706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.527517] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.528990] Buffer I/O error on dev sr0, logical block 5, async page read [ 429.530283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.531255] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.535783] Buffer I/O error on dev sr0, logical block 6, async page read [ 429.537141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.538093] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.539597] Buffer I/O error on dev sr0, logical block 7, async page read 02:34:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 429.547903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.548871] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.550373] Buffer I/O error on dev sr0, logical block 0, async page read [ 429.552063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.553007] Buffer I/O error on dev sr0, logical block 1, async page read [ 429.561294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.562436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.563494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.564595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.565655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.566755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 429.620545] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 429.621813] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 429.623349] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 429.626066] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 429.629122] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:35:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:35:02 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:02 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x0, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:02 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008000000000000000500000006", 0x29, 0x4100}, {&(0x7f0000012900)="ed4100003c000000e1f4655fe1f4655fe1f4655f000000000000020000000000000000100300000002", 0x29, 0x4b00}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x6000}], 0x0, &(0x7f0000013800)=ANY=[]) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100), 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1, 0xfd5, 0x1, 0x1ff, 0x3f}) 02:35:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x184, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x184}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000e642b222a3d67bfd96f3f485ca53ad6c8372f84960010a8036ea12ad582c9dbff7941ec4f408f3b7851c3104af9433d425d72aaf1e58d4fdab987072a3e0c93c3f8e3c67bd98d235896c0207ebcf864de34c6f80ff0956c6946ec074d93c5f68be57ce56cf", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000008000c8004000c8004000480040008800800020001000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 02:35:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x4e, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], 0x0) [ 440.767659] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 440.772718] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 440.779083] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 440.781709] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 440.783990] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:02 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 440.868116] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 440.869256] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 440.873489] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 440.874638] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 440.876363] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:02 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x7500, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000005, 0x9}, 0x10200, 0x2, 0x3f, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) read(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x8, &(0x7f000001c5c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x3ff, r3, &(0x7f0000019300)="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", 0x1000, 0x4, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x52, r0, &(0x7f0000000100)="2e7f60cf8938e3742cd3445da1", 0xd, 0x8, 0x0, 0x5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1000, 0xffffffffffffffff, &(0x7f0000000280)="b9959da1ec132e4eb0625a6799272ef576a7ef7891353a", 0x17, 0x800, 0x0, 0x1, r4}, &(0x7f000001b300)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f000001a300)="75e6e2fb7e0f25eeca09f5eacb5eac4cd432205eabd006d9361dc0dd4964636fc8f4bb0d70b8df2c9b95fd066a3c037c21c5a6d86d665ddd042f3210da77ccf1703d6bb71371f36e0a3702c27a331cf6bdab6280521312ec8e89c187282f060cd0b4861a9c055675f57bd06db1241e042b617b16bf1927e773c0d3ba46f48f55917d91a9312c3e59d721bd3c3a09ddfcf340609923cc92c253f4fe09e44c6242d7a9c4ab521e7826aad5bde2609c03e0863f1c279308a612965c930bf8f830666e01a88daa97ff01b337aae209f13aaf6441b2372424edb10f068c2afb6ac7ce95738ab7099778899e58af5bf87859b40919db0aa20ae69e3b99cf8cf27d1e933446f57c2186d282f32d04334ae457a479ca9cefa357adf59ae91ca0f4ff94338cd86e591c1dfe11c269909942eed0559bb2dec2edb4a5ece272f80f16615fd2151184e5349381e8c619fb4c2f05a550229a227594028a4603487f0b90888880d6faa54d12ef962f20b76cdb3bbf2c03fc202ba321d2ca17cfd5d4745b34935c61dc8937439d35e919fb63c1da1c22256b64b7dca9777f74f65b389c800cfc705edc8e005f721be5fad08cacc24f8690ae990b5e30427792db4b889807f793d076babc2de7070b47035d8038b1cdd702a7bea8bf3709de87c2a3c06c2971347e923092a080f2aea0640588e3823659da356e8491e9661dc7ae419d1010b0818b7a3ad410c1c459a03788158b336919c1db40489933fbc14d5b4f3f199ac18aac4e924ec9b9b76b96271bd704e4f2ee36bb607d1aeb925980f0efbbdeaee33000ac1cb50f3cf1e67ca16fad6a51b4aea761b547a1e81ed9e83df15778dd6af11a370496a085b9f05550f8334b6a3dd45db2f759511d19c9cd4ce194b6409e2ff5f7b82d9c5c01fe66adcddb3fb15eb1b52108b4f79da17b39184b0c3d38a60d9363d61cca4e9ce589acf91db3cf9c02b91bc05de014725fa96ebb57b5dcc95c574535b4a76487b76d0eabb939bc25fbbe31f2d17c460eef7e08d718c62c4022687f3868d9ec7662b5a87fdffb75066d28bef2cab56c13b40195620e6d30e4793184fa19d7b0618cc89d6c24feac139107ca9761681967d6f0fcca940d8463d088c383cdf23033fc75850532480ad570efee00ca73eda6687a9db446d26eabc084aa461886b2631bf8d9a04bb4570798391a882657192390211670fc9fe87047e2ed57316828baa0cc164224a25d350f6be4d3f439f733af8a3e6d99274aff7061352050766f1b2b8b37dd7ad6a510f3caa7d67a1b5102eee0d8a5dcf2a01031c7c6a6eee98a1f89415314983c43def7302d854cb0ccd8e3e8d12c05ae3b581dd9b4c10e6fd0aba18060db97927508cc587771d9d57a2e9e8743e31f146e50825c9abb2915197bf7087a6b99f3e34f668dcd371411506cea5911e11c60077176cb044df3292788f8aed1220fd1bcb67527cb8f584a1927f4671425042bf540e307c286c5486f24afda4e7d0245db5c6578476b4305fb0ebbbf1846715bb93f53032080a14b659c47cd7f2598c809c885f6f22ed801edcf2bca3976b05c64d8931373ef98e71b73c3c7aa2bfc2f080132222236f06563e908fc1c555bbf63e8e25dfe339dadf163cad6a616717d1a39362cc2b33b3b08c89c1b7bf2bc28bad511a0e75ce5b70d377e8f50850f2ea64fb8937c0e47d6076307c733aa8d76a735f82e34c425d169bd2e34e1057770eb10b6d0d00d132b899978ee61f491d730a4fdc310a50e36d778954b541f22d1731f06a3654fb2c7b694b5105486a9d19af0e2c964e90262ae35f596532e95ebfd0a2a928c612d089b8731676a29d7eb9b180dbb5d7f36bdd1d1950213cd5fc051f0fe15f993020b575ea3b7b166442f85fec5e5b0af452f7b5ec4643ff741e762276712f6ea360d5f199edc2f8e92c8ad82f90af00c0588637a98c8365e745d6ff5e05daad557b24ff264c0923e388092d989f5a6f0282098605e8e024f9e6694d4d8d05dc8a68b545add678bede9e028dabde073db3aed9f24c075bcc7a61330520f2c280db4feda9d5995004c24f79fee32a6eaad767091a8301e09584debabb6a0dd0229fd1d0519486ca27a2dc26f5c71ebf021848247b424afcbdbcb37e8246fa5998bc05f39c5596ef13111c3e2a5e6cc4a53383de640d60824edc3edb09120104eb099ce3b921ec7c358ddd0441ae4df549ad1fdb33d07924201bc4df46871852c3755b1ec7058d8e633e2cd10d34d99d022a81c874e671d234a59277eeb8b921cc5c1969b66b8d5455b584958d8f36b5fe9145e9657c870fe3f604f7e23aac49949561fb057e2acee3a896a9e53fca3e46f1ec6d7feccb23d948414ddf852d061e9f5242f541f76d573ab58a5e8d7f951fe130b279c275d8c23b6f2a8aed0b00e4bdc27bdcbeefaec6d230aecc365831bc1f5d0729e6503c0fd7b2df9d11155dcda13da599aa44c736417b1d38e139e119fd7ee81cff0ef8314f847fca588339f2c5d8c4ae4d0a0a28804850cfac556017e43cd97b754a9f40060b8129a3863db92293fa0ee0809b3b1636a22a8c055d47482038c69c700cc3ac9c9e1faeab4ed67c65b972c2b6887d4d8edf1f12b822a3b6d2c2981bcadf8080455ed1677b2e883ea5fb13d5fbca4cd1cf31860b5f07c1f2770cc91fd0b04da475653836b80cd8cf2afe5c7bf3299d62bfc688cde0844d00628f0455af5794efadb5a9c69f537e77b75247ab67e1982c40912a2dd0280a6187183f4b85f6e165a0d7f0cfacde3870c7225c57857ec1feb6375a1b8c0bc14d440a25593255860ca9300cc211058727345c2d65ef742f97d0e0783c7b74505faac3bb729a69b11cbac85ac5f7167b72a2b485e367bdc6cf42021ba85fc0ed91afdb10b598c67499b35d71b26ed64b67d1e6bf04c55f619f8ffa6444122105202bbe8d10c1161009c0f20c386c37fd292871dd4d56a7bf9fd382552e6dbd671e90e0fbcdcf744520bc0116097c50deb9ba6f183f0adde09cce6fbd3e3c20520c0d1a0874583a967bacc85397004a015ee6202ea58c064e2ab8b703762bf1b9f8aa6eded5a023355231f64d9110b3f9981f299491e40285b1b0bafa8363a18e00303c48c97d9c973a942f59e35fac7413cb4d73bc9fdbac760b3e6737859b7f7e6a2caed3577964d6e6a871f665209133384978402825fe2ca68e7fc70057f77394a438f899c8cc60d5b06595428a03b2a2a005b2efe1a466a70945da5b06f7ac352c770bcc39e925f9dcff16a9447eb00d8c8a00546f98b5487f83d9e42ae5a86f0bcd1f40d527247f2d0b79a1efd242c5b568d1d807679b1709e3461976356c113560dc4597e7341f9deae86850834fe34f2e05c7e7f49d718bbd7b7984451b9325e462de4ae3ec1df813336be542f6061bfa891f8350dd2dc75468e447823197acccaeb25fb2dab8c865bec5026e1fa22d31856e1d70c421511905c3c47adc6ab7455f616492db10922265a1ebd0340b54024483ba6e666c2a3aa8eb119efb10845d447ced8011db33751f345e6aaa7cb6a8a1fcf4ec149d7f66527aa22103c24caf17a7bd05abe250550f2a7ecfbed5ec4f90ea21f51d020fde45cd4cfb9acad1eb8ba9d157553e97c8f2b89387cede81840c7a8e289f6d43e88b227a81c2ba22e5cc55da6c41e5454194df7b5229f49c61bc83706d0804f75976edf23f8d068137f34b8924125371dfda5c94f8d8209728d88a0c6739462b463aa955e2231af3f4c6cc4c81a7eaf34e2c41b4fc26f2423ab9b23fda63e6824c356471056ea4932ccbaf2f9d11df39ffc090e160baa364fa234661ff866d1df6c37c3c110f00adeaf109a34e2cc5476a8556a27e254b82f6402d5201514addd06e8603f7ed4e03d85a7f1a361b3ecfb13ae2fc70752b4f39e95acb1848c8eeb9a100ee5715094b9c48c532572e1aeb108716744a402d56de931a2d7eb666dcd3b8a0b88f0feb2ea5cd3d816c893c5be32de24160b6d83e9e8b6746475293a5df4e8e3801f1fb7d64eb85ef651f37df4a5dabc3bdca0c32730de2540712d0551c41fcc6eee6de3d850b855fe132b87a9c9c00f1a4e22d0c3427d4efffcb2ba94c2ae154313e04a7a2e502733251064541ef7f2815ffafa504492664f1ca177ecd3247376d5b22cf518b9ee9645990e1fbee1546b3db240d6504c316baa42bb2701936c64d71f014413fbb3da60f2448066f13ff7c044e2ea3a2e90e40cfb882c2d419abbe115b3ff5c48b114e2f495e013c43d8fa0e09388ce7edcff753e28328a582752e0821e7edfc390d95d1112ead7ea37f0e09323ad0fa6635f6887f23e0d44b8140a4f762b64007ad089f58994285a480ec8a63ed6329879be7c8b36704ce3f814c714b35831b68f768229608b503acf8d28eb8a42f51d07204028eae31b4ffdcc77006bb4a1abae7ffe963356436c0bc85c4c31dde7f3d8a6ce34296b059e8fc9c6fc41887ddf92c453e62e49c04be79131fcf88a41d732b129fa4fec0646a00ead02295615a2392a6d70f69139cad995151e7948be4fbfbe16940ea68e9d054c3ca6c6bf0a09df7391e25fb9cccae3fae7e1918ecdb4c1266fc2a6a72bfc4f62296f832f57fff6aa62bb2f6af049905c2b06385f9b804657524a1859375bd5947ae9135f43c078ae1c69de253c986e32fd17d1c0b346e289402ff17f219bab47e0ea71d3beaada462cbdfd9b94776c9b69c37edb2e392090e436d28f7d889ac7e2a8e3c47d243cdb7169864a1e7caa00667c0851eddd6713021014fa9c5f2040debda44fce48437901eed9f2558394a1cf4d6e55e644839ae66c646fe14ff4fcc60e378eb0bf09a13a94f25c4a2ab49b374ae6293ff24408ed8d432332a3cc06b1e9d246439fce84a4a7eef4c7c3817daf702959343ae3aa5873c1bab00639c702f8f7c901144ed3ea9d3dd8679eb8536f0c69093d5908db254b772267e10ef6da315bc0def4e7e737d317c59f1e7eaf5d23c0c8c2bd4e124cdaa8028e64bf650e57fc511889168cf1616ad73a8bc71347babf63ac742c23f1d890dfb8a8fd4651ff5ce5bc6620437c84af577061936b8cc3d5ac014e8ee742b4e92bdc2e324eb01cc2db24df4e03857a17e554ba173aa77631b1435a23b2199a9b10a245ce8b8285fae7157db7c52515faece4d45000d3016bb3f532a8ab01f42ce6370e979ef14578d25561140c8f6f008cc92a5ebca205e469262a7e862c71053f3f423e7cafeaa217e0ce68c6314d19945e0231f4f13b2bc8644ac00eac8f8a0a44c48ff87e1b25ca05e2bae2418bc90526bcce951434d5debdd9ba1c0713094376f6677f50b095e7e9d01d5cc25495376e4f733ff3d2bc9d9811a511e286bf1e0b402d2bb18679d56bfbe8bc83426be2cd68fad58488a0baa0d7472d20ff08f97440d803b90e7aca6c8be7be0550915daa9ca3e428e38d29997d8c8f06232cdb54c0c3bcdb10f32cabf8f9f1a3721eda756d8a5d54e97b5d5c6b37a04e9ed34f41294f9124bad67472bb09401bf7bfd7a81178cba35346ad2df807f7f416951c87901c31eb45d5295dd079d469ff90c05ea4a900626f21a70c76f2f94361fe7e1464f1416585ca628e6205efefb2bb23bbea43a5f8b83c90f548e16bd74548b5f47e420fb2968af911a7c4c1fc8682df8dd8655e46ec700c0e887ca14ea6faaa551bb895a44bc3869ec67af4b1f96f536d2a919ec936d9d4da2dd80ae90578c8db3a552429c519ff3d66954ab8d07b86e18cbddd9cdadfae104ea6412f45fd1be80730", 0x1000, 0xfff, 0x0, 0x3, r4}, &(0x7f000001b380)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000001b340)="46cb4b75ad3e35d299b550", 0xb, 0xffffffff, 0x0, 0x3}, &(0x7f000001b480)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f000001b3c0)="f3f494e015b8839d4f7d210af2478d3e2a83b458054df9feb6bde48c9bd3309e890dba2589bc232d99358bf7012a02e7c24499f37e54ff490769a986ea4b692622f4883870fe7de8d66e175d39a73d4881625a875ecfadad71f25618a8f7efad3800d1d6c0eb2545cae71cb2d3789a9dbb4ab5b60ff4e65af71671f34c8ee7d3a75ba31c6f3fe4f48b97d0f6c401abde728612f7b5db4fc1037ea7a8b937bce4ca69cb5a5c0a67555a92087020c6580cded87d2538dd308d70", 0xb9}, &(0x7f000001c500)={0x0, 0x0, 0x0, 0xd, 0x9, 0xffffffffffffffff, &(0x7f000001b500)="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", 0x1000, 0x1f, 0x0, 0x3}, &(0x7f000001c580)={0x0, 0x0, 0x0, 0x2, 0x8, r4, &(0x7f000001c540)="5d542a1831df762eb256682cc9ba41d3505db0588b922213bece854349501f3bf0851d1c67cb84fc8ee6f4d24e09aacf09464f5e50c771c14688", 0x3a, 0x8001, 0x0, 0x1}]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 02:35:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 441.081344] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 441.082884] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 441.099316] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 441.100616] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 441.101752] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:13 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:13 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x0, @loopback}, 0x1c) 02:35:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:35:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000005, 0x9}, 0x10200, 0x2, 0x3f, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) read(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x8, &(0x7f000001c5c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x3ff, r3, &(0x7f0000019300)="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", 0x1000, 0x4, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x52, r0, &(0x7f0000000100)="2e7f60cf8938e3742cd3445da1", 0xd, 0x8, 0x0, 0x5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1000, 0xffffffffffffffff, &(0x7f0000000280)="b9959da1ec132e4eb0625a6799272ef576a7ef7891353a", 0x17, 0x800, 0x0, 0x1, r4}, &(0x7f000001b300)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f000001a300)="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", 0x1000, 0xfff, 0x0, 0x3, r4}, &(0x7f000001b380)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000001b340)="46cb4b75ad3e35d299b550", 0xb, 0xffffffff, 0x0, 0x3}, &(0x7f000001b480)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f000001b3c0)="f3f494e015b8839d4f7d210af2478d3e2a83b458054df9feb6bde48c9bd3309e890dba2589bc232d99358bf7012a02e7c24499f37e54ff490769a986ea4b692622f4883870fe7de8d66e175d39a73d4881625a875ecfadad71f25618a8f7efad3800d1d6c0eb2545cae71cb2d3789a9dbb4ab5b60ff4e65af71671f34c8ee7d3a75ba31c6f3fe4f48b97d0f6c401abde728612f7b5db4fc1037ea7a8b937bce4ca69cb5a5c0a67555a92087020c6580cded87d2538dd308d70", 0xb9}, &(0x7f000001c500)={0x0, 0x0, 0x0, 0xd, 0x9, 0xffffffffffffffff, &(0x7f000001b500)="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", 0x1000, 0x1f, 0x0, 0x3}, &(0x7f000001c580)={0x0, 0x0, 0x0, 0x2, 0x8, r4, &(0x7f000001c540)="5d542a1831df762eb256682cc9ba41d3505db0588b922213bece854349501f3bf0851d1c67cb84fc8ee6f4d24e09aacf09464f5e50c771c14688", 0x3a, 0x8001, 0x0, 0x1}]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 02:35:13 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xc00e, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:13 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x6, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x8, 0x9, 0x3, 0xce, 0x0, 0x6, 0x21040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x4, 0x8000}, 0x800, 0x100, 0x6, 0x8, 0x7fffffff, 0xff, 0x7, 0x0, 0x9, 0x0, 0x28}, 0x0, 0x1, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r3, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) r4 = creat(&(0x7f0000000080)='./file1\x00', 0x4c) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e9e9de8c000000"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 451.738799] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 451.741891] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 451.748269] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 451.749607] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 451.752442] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 02:35:13 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000100), 0x4) sendfile(r1, r3, 0x0, 0xafbb) 02:35:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r3 = pidfd_getfd(r2, r0, 0x0) fsmount(r3, 0x1, 0xf2) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)='T', 0x1}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 02:35:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 02:35:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) 02:35:23 executing program 4: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) renameat2(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x4) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="1c76fc5cb55b7bd90a06b26ab389a624b6e454327b1add24486c18cd1a4b71c1c108f4fa37825cdcebe9a6f097", 0x2d, 0x1}, {&(0x7f0000000140)="05355294dfc4a3e5b3c45beb880c4dda0683bbf2499d3589bdb6e5d8fdd827182a318e76022c6f145c613afbb168e8c2dec0d0a28276806e1e869d0487e9a17e1789ab556762f8e5bab44c67420ac0a0e6908645b7c571fdbf4e87b9cddafb7994503e8fd7c623ec4f362dd6213e5b054e75f872e5dce8adafd8375848124310ea5d8c2224c2dc6e75ed9e750ab52e24b13348d69118c0f503922e675128881693b4a9a616fe547e06a5291fa1558d3ab9e30cd1d9fce729a01139c691d566e85394f9c15948be2324b8af22b7ddd3dbb07237caac73287e", 0xd8, 0x6}], 0x42c04, &(0x7f0000000280)={[{'user.incfs.size\x00'}], [{@smackfsdef={'smackfsdef', 0x3d, 'user.incfs.size\x00'}}]}) setxattr(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) removexattr(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)=@known='user.incfs.size\x00') 02:35:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xf000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x3f, 0x2, 0x6, 0x0, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1000000007fff, 0x8}, 0x40080, 0x6a2, 0x2e, 0x8, 0x8001, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100), 0x4) write(r1, &(0x7f00000001c0)="a6c2fcc87ba8f60acc0b600c765ec331c951b7e7ebe9df7db6f52baf23ded0c8860d6471a5cf3c44bf740dfe6704979eaf0157bec5119447394928e9fb42db6b3dc2f075f211cee0350cf06bccc82508bc4f871de08a8f732f9f3c2f2adb520cb0dd343f49c12a2f04753f9b00ed0c13f337eb88f35bcbf40dda8d7c49548a602edceb8189a0bce6be9fbffd81241f151d1ec37b48b0095a5736d90d91b1a61e858a4eeedfa2f2d3dc22476c0c1c4c291f02e9858704625f75e2460af5db9e6b97de63e0518cff0234c91fddc9ce54afcfd4335c7ff53c20ef840663a65435487518cb8460db008124658db06f1ccbb6653ddfbb5257", 0xf6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r2, 0x0, 0xfdef) 02:35:23 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:23 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 02:35:23 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000680)=""/97) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffff, 0xa500) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x64, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, &(0x7f0000000380)) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x6000) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000580)="b16afb0ca83b17bfaf9f6a92a908de3d2df3b0959d639706be89c31e4ceab66f8154fcd7867bffa06fa3c45ee855d6be9289c8e43517b06600364095b8020beb0600d8f22d44052b4ca563d69dfcb723df205cb99472206bfe2e32a8403d82e532a333162b4359d17c4c1ae0e143f66012236df1fc8ffd0151c606c5f5bde865de7cf55cf863f32dad296d168c65ceb72fa62db2b6eca6bd81b8cf5743d4fe028f38c5eaa2684984e7046819e37afd8731c43fed0c0074837a1ca4aaef80a6309cc1de6368d7813e231c24662e09aacba54688de8fd46b33daca2dac7917044c16b34217", 0xe4, 0xfffffffffffffe01}, {&(0x7f0000000280)="034aa4252987eb288cc32137f8012a8e452ea4ec0c29c7088b5c2d6b09107ed192f6777b16c9fb4c5975f25c2009ea11", 0x30, 0xb3a8}, {&(0x7f0000000480)="77dcd8a382cc59ed1cd3111948e723b1fe1afea1fcd9d9320e04de46f0e7a8019b96993c5e02132fd62ea18b34935bb63833198c1b020734502551485450ad39ebcd7e721b45ce4e848b47a9b0afcb027b152e077091f25163e316a940b46712f064fd1fc0b9de9aff9aa60d0156750fd135ebebeb1d7d5423177f85d43cf0ad3f5c5c399d408219edd1b14fc614f3cadc5bea00536d32e2abaa7b181d6d5d96f2e54b8834d238346abf9e82a5f02707efe5e69ff6bdc84e6e1388263e735628a7a72cc1cd12c10d81f6273ad78cafbf57efe928dfca174167419a844682ef6b", 0xe0, 0x3c7600000000800}], 0x100000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=0x0000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f726f636b2c66736e616d653d2f644d142f76637361002c00"]) [ 462.249433] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 462.255541] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 462.256911] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 462.260721] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:23 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x80000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 462.337003] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 462.341444] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 462.342809] Bluetooth: hci5: ISO packet for unknown connection handle 1106 02:35:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x0, 0x3f, 0x1, 0x8, 0x0, 0xd5e, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x7fffffff, 0x8}, 0x18004, 0x6, 0x6c3, 0x8, 0x401, 0x10000, 0x2778, 0x0, 0x98b, 0x0, 0x1d}, 0xffffffffffffffff, 0x9, r0, 0x0) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r3) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) [ 462.357250] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:35:23 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 462.441363] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 462.451527] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 462.455176] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 462.457567] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:23 executing program 4: io_setup(0xfff, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/mei', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2, 0x0, 0x5d}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="ea", 0x1}, {&(0x7f00000003c0)="471b58722b688a7efea338c8486118bd1913a0623cdc51f6efd3be2be4e0b618b717fc03d05c2a9afbea8f854eaed9327bded548c373cf7551744daf8c08d419e6138dc9741ead307071b58ed552847e703451691460c23072bffb12d654406bd8b656e585171918ac706ede0c5742"}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x1ff) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x600}, 0x1c) 02:35:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0x0, @loopback}, 0x1c) 02:35:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76081632, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) getpid() ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file1\x00', 0x4) fork() umount2(&(0x7f0000000040)='./file0\x00', 0x4) 02:35:34 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:34 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:34 executing program 4: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000002600)=[{&(0x7f0000000400)="ea548f70eff172ae7b6c9c96b5717e7ee59b5c7cfb2f5fc627b3fc5e2d09ca1af9ffe1e22d333035b588984782dc4cad2b336d2f0ca6d78c94881ae9d85a14c705d267eb3f6e5873234ab4312df4843717856130f989d7a5564a1f3cd07e313977081294ff1e1873d3c881b91513918fbfbaf6c34f77c04e342b2e9de2f37508d9c687375fe8f21a4e30d7cd82ec4dc043f0817b4a308449c87beffa4e40f3e36e68a1ca8b2dabadcab3ec0b647837bfec65e57eb2d6ac43a2276ff996f1e945f71d6417b95e76456c8bea8fb3307d397e9f91d2a2210145c410ec35f867d8fcd1e4c56f7e8dffa67e00fdd78102d9cf4d1ec154619aaa70bdb82c0ac645452c67fb8da18cf5da269a26067d75f957028b7bdfe9414ac298f7cc7cb877f210ffc8cc73f1e87abd6520acf83d13d60572982f050e4f7e5e27d057ba100423e66c8f9239ea953e3f07ef9a054c41cd565b04d0ea081c2d41991fd19166194211db2f26e657f90b5f9022465104418fe8ea68955643a7d2f338b1cbc22cd3ce0534c470daea7f449f405b5e23ebe069d9e65d94294e89b7d7e2f9668b3f72c72bbf7d90d68460eaee45a9b230271a3717f8f5c40a85107e3c27c6399fc2baeaa22fc8de610f75d42c34a88682627c9ce3fc5f839d74ccbd7c7fc8ef89b9eedfa44b17adbed8a9545d65c6c98ca40c456d596114f63b57c58f1c5205b8d324b04acc6450a4ef0c0a26c2d3f73b76b74443b14708eba120e34a5ff2c599b9ee1cfb9f160cce7ee100810fd0b49a6770bc43d5d876af776389a8bae163db69aac3790651db25e330e49f582a5e30ba17f1bfe08d6041b09341d9f98edcbd05bb6746d898c1f7778ca3e28759d286431ea47e0d0caae2e94a788477d807a9c1491345081f7b3168329fe79056d134c87647fb46f531dfb8c48068bce22bfb2cad98b934f6fe4244dfc0d00d378f448fc9ee00a64b708f01085809a329f210ef47f2b4d54c7962eabea2b1863623615fd6246456f2a5bcc2e6bbfd5cbed8caaf9fbc0ba63ca0e73c982809082e9e25e1b6c4dbe4ff28dbc202df826803735ad03f111d4c5c6f37314acf57c5b94dc8e943f1d268a08a3bceab20a5ff9629b6eadc544ce96b56793ea8df709fe346461fbce992cf49b914b99ee52e05632f27badf3b5c6c8492c6241230877edb555c115669f7005c1e27dc1b011291c2f1378467ca799c069ab4bd8f7c8224bb27d3898274de39e8978ac3ea7e8b5d44bff2333b5bb755137f4211ee59c703d6ffd8007b5a1868ee8c0bc3a11c3425d05ec0cecdc289c99d5135b0a3cc9c96fe7b4accbe14b1fb45d22e692b36badc6dc7b18be1ce30908e36d924584cffdc9761a3dbb274c583db813ed2c5a822f526767ebf82c104cd30d80251ec3445b534a1d2303bdf2fd2d1fb1e78131c88f3f67347d711dede12fbf81e9fcc88f001a52a39936f02cc07ee8b37169359442bf1edf64f6ba56d6f4b9de9bf6c20ec637b16f1a57396432c8db76d26fc8088c5fc490d10ac61f6d73ca21a29b0d93df39580822d73b2600cb751f617c8023c91a49d28544ccd213b430e6630c8bc22f5db21e3fc1d21b89698a5b0c18b0d5e83a6cbf78723e9e59b7cbe70017362e11405fea0560ea4067ace19d01e37d289aca22e29363035710928cf196b493d05fec22ebf0cd3707121f2df01c9f17dc62b72bb81053305ed4abd3c49ba0c0dbd14aef40acf2f5fdc3c3a711f249ddcc3d8e44022edeff77ce5fe0de97171ac3878c65a3ef4067e08f9ff0f91c7d254f127e02fce80c8f41426d1143ffd38e32ac0823b0311c512842a838af926f8d62c19f3b519818624d719815075f6b944df7a4f534ccc73d0fc5f140760d07a6a7dab3c46c591627e3d7fcd75f3054f0689b763222ac4d48845f6ff18651d0832424167ef50c13e90ffbc7cee8240e61fc7f6df6d876c451e35c2c67fdc12506dbcb81f920cbf516a0a23ec11e459a0fcad42c9ecebb371b5b82e5490770ee7a16845442db980916b108a0d953ee24ebf506502ff3f80a02736ce284fab356d5bcec8f0fab227d74c0d78bba69c904673a2825246450379123ed6e248003438976a02d3a127462ae7b5efbb7d830e7d65e09ad7bc419e47075f6b710ad18b8ea5d208d786290cb79047a54a35bf35936eebf0a32afc8c947af059f8ff7d6b34f3bf988733c6e4dff5a213605caf5172f8b2c37b9791ccf54ca7b39ac0223a9edb3a06f1cd12cf8e789e2c3817594c04bf20b14c0e77017191510f7aebed0622d8f9802aabf93ca2b29a41ef1db831a5f834e76ba083bfc30b98ed47b40516992b4bb9e3d5bcf311b28e805faf3e49323dd038cf11388056949798da5a38e1d929c1a98bd7fc9814678df5d16eba27e82495fdc5c75a2d33f178c7db04ac07e48b50f4032b538c4dc1637adc8e8073f28f51aae9d3f6d0488fe3a6076c67279da4f6484d4acd68ed5fadba94524974961aac700074f736eb316184098b9bbae1071282c800f372d4b911883a8b751ac893a495379693fc7c29b139844cfeb0b2599a5dab24302f9182c5ad9642b98978f1076d8c9203f644bb32dd8480804d2e36d096049e8581c37132a6c1833193e7d75400612fc2194e96729d3ccade2ba1f6e700e11a8e40f585b82223bae926e94d987bbb2ebcbe4e26dc1ecce843b007d112279d85210ae39b24193ebdaabe5b79a69a0c30a230c30d12a388c07fb8b4afe80d7e95a39aff9313640ece6088e763e024cbb69bd1205a5d8c0d368bc35a2a65fced168998bd32adf5b65e459326ac8130628a9798ab838429f9b9a0d0e1ae48713cf693483b52b2cfb802c5072c4ae6c03539fd3e1ea68d024b0c613115fe5ff19dbaf489a1fcbb6f19476eea79316c14820881939a0a8839d8e6c0e276965c948fe9bd6a498aa16cdf20dc442454dceda4f128aa41cf58a7f69776f221e3f3da0eb3d82eddf9abed5a078efeb20fd0a752453ccd8823dda3b0920fc039bae02b878a3c7aa9953bbdd2fcff72998ce68a2bdea623bae5dfb022a1251d19a9e51faf82129cb4f0393c7b7b3ab6a8ba958dbf2e5117578b4fbed961f7499a958097681e0030a8613a4abae10d8478d461341bf596142c50a28e50fbd58260e0e30bcfc5f23d83bb9c4caac66831bc8e12d19d70d54da4561ff5a9bc75dfbe726665061e7ea94b3903e3d93803d30db2e617827476e9ddd2eb8d29f0e39f31e5f4729732d112a6ab9b5e7105344956abfb25b8f7e7277b19c39774c64e5375ca266f40d595cf55fd8465c8585ab372c741466886ba05fa2c30bed947477ae91b9d293771591509ef8aedfa400b0c0ccd54f44e06e9c35f3f7db479f6c17005c49299a845b710869aab182f26acd854de4f17c21b87b8a35acfbf09d1adb1cc34ea92af5c0d38a5809376f3dc2b9e0f211771b1b3795658e6cdbebcfcc869ec7850992b44b01588893110420bf5df20ee95e1c72b384ec61bff7614990caf7b5fd5434faa358b9ae473c6483922bfcff95c9f398c8340635fd96835ee767003ceb6af56bf7bb9e8c86f5eb2547bd059640d7295a84f42b75edc8ca459f1b782f6bf65ac250e757df137f95c8979ca02110ac0283203f16d0338a995fdc88e74bca7e83b4290a559290f7af6b95a75fff7fb88fad86e4052d9277e1f69283b61ba387d3cfbcef558acfce8c19f4f6bc5d0dbd36335b078bc97f1d5f95b71210b6bbff1af438f8bbf1baf96fce8e13ba171d914a229d9521a0fd483fef009226eb073df017f86d14344c7afdfe616d106a8228e83d7064f08fe278a0d69ce4c8102fb25258ae1574f03d428c54bfa7b78bc20a3df67113838662ce2a252cb2e9900191d6b03a5e1e401d8d272140ca63b61e90021f5cef0717a9595676d563c68b5190c224b2838309d9c54e470a41e2a985b75dea8d6d244388749bfaa9d1565d9fc759196d8f8a4f1a8976db2dd698be32bdb5a433a3bc6207f87f5310cd9abe61dda851a6f87ad0950e26ffd2e841d868d4559108f35fb791eb8376b9818e8655c01a77881b97956bd00b6223c36ee47d2bbf1b2e5acc8443a26d9a43f8051ba4272063448562357f663da2da5c8cc079178e9976a0aa583b2235d4a3b5605c8e11ae937f82f4f9f749cdb58a37beab0f6db65bb8580fe7403a0f62760ffeca3d25900dded103e92eb21ca1976da1ad6f74a2c0e4d4096cdb84d1e87bbff3f0b56c8e9977798d3e47e5c084f2a200ce918db38f3bc483cb3c1e1a31fc5d8db26f3995c2e2e747005f08871930c655d7f26cbbf9ba2801efe5b5950adda90977b3287ba8ebd5f5b7648ca54b48abd03fbbac3a1c9e49f13a368bd317a6158c960267a8690cfd41f39e7c7c018f0dcd308855666095ad3e7867286d0e56e3153d336e404d5ca78fe6bd7d10db23cf17df5d8f2aaf6bb391756e2625aa7dabe2cadac7ee00028639dff3e96b0526f42925b7a6ba50926b55a5b008b60a3bc198474f0ccba7a3dc433b4fea9dcb7c03a4e0050dbf258774b08771e930604940436232d33d734b1de2dfa5dc440459325d0c777358eb155a9a73067e57d3c3a8146d9c8a68dbc990d5c4664b435ffc25d71191ff8f2c2e992a8a6677c4c117299d07fc8195bbec4008c0363a0c8b9f1cc80fdb57770637e3672988ffdf140df8e6858a54b55a1f2f284f22621a44a28534db71f11efccc7f6c58858eb1c20e323be1d18", 0xd17}], 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x2, 0x12}, 0x9, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000200)) write$sndseq(r0, &(0x7f0000001100)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 02:35:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 473.556264] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 473.559211] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 473.562631] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 473.564120] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 473.567290] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:34 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:35:35 executing program 4: prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) dup3(r1, r0, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) [ 473.663145] Bluetooth: hci5: ACL packet for unknown connection handle 200 02:35:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 473.667401] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 473.668784] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 473.670107] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 473.672525] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:35 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 02:35:35 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/119, 0x10) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r1, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x101e) [ 473.786989] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 473.788884] Bluetooth: hci5: ACL packet for unknown connection handle 2745 02:35:35 executing program 4: r0 = fork() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x5, 0x5a, 0x2, 0x0, 0x4, 0x10000, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x3}, 0x101, 0xffff, 0x786b, 0x7, 0x6f6cc08e, 0x401, 0x0, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r1, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r4 = accept4$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendfile(r2, r3, 0x0, 0xfdef) [ 473.806973] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 473.808721] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 473.810929] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x2000000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 02:35:44 executing program 2: io_setup(0x3, 0x0) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_destroy(r0) io_setup(0x8, &(0x7f0000000080)=0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000040)="2b1f5502758f83a4", 0x8}]) r3 = dup(0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r3, &(0x7f0000000000)="ac10302b6417c3894e844f744e65e5c230b75af170cc9efe52a6b34fcc424c2061cbb0379bbfe2e2530584a5fcaeddfac9169204c2052d77a4baa935e16d17659884", 0x42, 0x1, 0x0, 0x1}]) 02:35:44 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "51c552", 0x4c, 0x11, 0x0, @empty, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x1, 0x10}], {0x0, 0x0, 0x44, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "f2cc07a9e6c0b5706219d8b238267e6b5b0af7370d47f2e682eed0adabd0409770859b897d2f1493856dcdcc93ca85aeeb9fb500"}}}}}}}, 0x0) syz_emit_ethernet(0x3a4, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x35, 0x4, 0x1, 0x3b, 0x396, 0x68, 0x0, 0xf6, 0x2f, 0x0, @multicast1, @multicast2, {[@end, @generic={0x94, 0xc, "45c1cd39483be0636acf"}, @lsrr={0x83, 0x23, 0xd9, [@empty, @multicast1, @empty, @local, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0xc, [{@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfff}, {@multicast2, 0x81}]}, @cipso={0x86, 0x46, 0x3, [{0x1, 0x11, "97ece1d2566385d660ad1922cb2ba6"}, {0x1, 0x11, "d69213b61df5249289d7500b93abf5"}, {0x6, 0x11, "6842db17d40996654913abb78277db"}, {0x2, 0xd, "236afdabab68a0d20a821c"}]}, @timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0xa, [{@empty, 0x4}, {@private=0xa010101, 0x2}, {@private=0xa010102, 0x6}, {@local, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa1, 0x2, [], "e28aa5e54ffac09cbd8b884d34ce49cef3106f608ac263bb0c6cd23b2c4a806fd50e1219285ea6b932e846ff245a1dad2b6661c7e635a94d964ec048ca74092edbfc2be4b16aa37c4d7207adc1e288a6d57a945563b20179196f34b2da282728c588c54db6563ffe565b811a2bad56cb1452ba4b9da8d1aa5d29a59518e0ef9da6c2292ca65286568e002747b9ab3806ee7df4f77f430007393509746d0b2f207a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xe380, 0x0, 0x7f], "df926d86110ee7bee5dc657c8119fb77e6ab3f58f55a66c3fe834b1d3bcfab109170d6d59ee38a5dd22b1cb8647d86451782aa1601e53b6f7101e37c88689dd73ee8645b50b471efd11761cdeb5c9b8b5d92379cf41c45224a71b3e762ecc03ad651887c3f0a68765f959a18bf0b2b32a06bb09ab0d150300755c834ea59975858755010abe44f5464a22a361520379c17d6986e4920b329ad60684174a51a3c628eabeee1dd833eea78a9d8f88633816f4137289f5802763aad7cc5bdb257635846bfe56483fbcc0a5113063e6f7ddda57fbd095b83001dd7e936ff19b6c7c19fb419e8ed6a52ab1273d675c3977ca64ba657"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x0, 0x8], "e537c978875a0cebae1ea31efda79ad0713bcc95e89531e7872e886d7c179fae378087f5961a630fe526172105c76a652f2c6c0403d9fc54556809d3df6e99822bfd0ce28744594596a0798b99c94ce8060e9735755170ac56462d008bf3d12d33b1abedbecc37d62293674dac93e7046dfcd41013ac691db3396dc15ba19cbef87a6646eacc19a0c61ceb1197342cd4a8005d7ca9363585147a"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x8b, 0x1, 0x0, 0x3, 0x0, 0x28}, 0x1, {0x8001}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x4, 0x0, 0x1, 0x0, 0x2, 0x8}, 0x2, {0x9, 0xffa5, 0x1, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e39876e3c3febecd20dccc0248f7ec72001e749aaa168944f2369f3855064734fa765af07c804110d9715e085d55bd7c4cb9e38f23b3ac0591e353b0201bbce8b604d52a"}}}}}}, &(0x7f0000000440)={0x0, 0x1, [0x29, 0xf38, 0x308, 0x753]}) 02:35:44 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:44 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x5, 0x0, @loopback}, 0x1c) 02:35:44 executing program 4: r0 = fork() pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x5, 0x5a, 0x2, 0x0, 0x4, 0x10000, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x3}, 0x101, 0xffff, 0x786b, 0x7, 0x6f6cc08e, 0x401, 0x0, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r1, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r4 = accept4$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendfile(r2, r3, 0x0, 0xfdef) [ 483.523183] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 483.524785] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 483.527345] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 483.531222] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:44 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:44 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 483.654736] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 483.669141] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 483.671814] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 483.674400] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:45 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000480)='i', 0x1}], 0x1}}], 0x2, 0x4c891) close_range(r0, 0xffffffffffffffff, 0x0) r2 = fork() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x7, 0x7f, 0x20, 0x0, 0xd3, 0x8000, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x2, 0x7}, 0x2000, 0x1, 0x0, 0x5, 0xf65, 0x1, 0x7fff, 0x0, 0x9, 0x0, 0x1}, r2, 0x1, 0xffffffffffffffff, 0xa) 02:35:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:45 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x9000000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 483.808334] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 483.830345] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 483.832200] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 483.833303] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:45 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 484.002420] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 484.007234] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 484.008707] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 484.013383] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x75000000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:35:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x6, 0x0, @loopback}, 0x1c) 02:35:56 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x240201, 0x0, 0x1}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000700)={0x7d}) 02:35:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x5, 0x4) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x5}, 0x4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000e77f00000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004a7bcd9fa6f", 0x22, 0x440}], 0x1044028, &(0x7f0000013c00)=ANY=[]) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x80800) 02:35:56 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:35:56 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:56 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 495.123839] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 125 (only 16 groups) [ 495.185211] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 125 (only 16 groups) [ 495.197736] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 495.209455] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 495.210316] Bluetooth: hci5: ISO packet for unknown connection handle 1106 02:35:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x9effffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 495.240306] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:56 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:56 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:35:56 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:35:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:35:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:35:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:35:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 495.454523] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 495.489179] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 495.490268] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 495.493565] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:35:56 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000400)={{r0}, "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"}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0xfffffeb9}]) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '^\xc0'}, {0x20, '@.{&++*/[-!-:'}, {0x20, ']\'[/'}], 0xa, "16596892f025199e27050e90f988b16dc4d0fd704a11fd4b584170c60a57a021e6fe18f39f7ae94baa916dea927ef868efc5cb9c14735fc6b43590114a5760b144f7b0d9ddbae95d09534b60c673f0cadfddf1f6ac10fda85b94da665f2cc3cf52242d96aa2517c60c2d4eb5b0ee35cada92af07735d48a445f41eccec517296ec4dec613dcd5207050d317d8b361df98c8e8bcb4cc0f1100b16ec8ce360c3d7185fcb61aea095d9dce382b2dbb24c0bbea4648e"}, 0xd5) 02:36:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@dev, 0x35, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r7}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r10}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40010}, 0x40084) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x48, &(0x7f0000000000)={@mcast1, 0xffffffff, 0x0, 0x2}, 0x20) 02:36:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x7, 0x0, @loopback}, 0x1c) 02:36:08 executing program 5: clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x381703, 0x0) process_mrelease(r0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x1f, &(0x7f0000000000)={0x21, 0x0, 0x7}, 0x0) 02:36:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:36:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/119, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c060}, 0x40000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x402000, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002a200000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845170508076f8d7843"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="260006000000000015f2ff0226e40534e90059ec4f5017d2d16fcf834077b2f848626255d1b53a05fe1bc78668906791ec0b59198b1fe6ec6a7b3aae41f3cf4635c8aeb3ac39b3da330b49547b40e94e94fe42bde705aa1d2f21c0317dfe5fb6d87b84aaacaa02e5c35d9b0c29729ae59b6aae6e4e22181e48ac897a4d39ceef5d3da2b473c5a69e8d0779a503ad94"]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r5, &(0x7f0000000180)=""/119, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x80, 0x56}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000280)) openat$incfs(r5, &(0x7f0000000200)='.log\x00', 0x44203, 0xd2) 02:36:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xc00e0000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:08 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 507.305636] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 507.306871] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 507.312007] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 507.313471] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 507.318805] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 507.366402] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 02:36:08 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 507.412545] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 02:36:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:08 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 02:36:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0xfffffffffffffffd, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) r1 = syz_open_procfs(0x0, &(0x7f0000002c00)='net/snmp\x00') setresuid(0x0, r0, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000001000000025a24e6", @ANYRES32], 0x2c, 0x0) process_vm_readv(0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1000000000000092, &(0x7f0000000680)=[{&(0x7f0000000800)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setfsuid(0x0) [ 507.536993] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 507.538256] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 507.545111] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 507.546320] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 507.547535] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 507.551146] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 507.552339] Bluetooth: hci4: ACL packet for unknown connection handle 2745 [ 507.567512] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 507.603153] Bluetooth: hci4: ISO packet for unknown connection handle 1106 02:36:09 executing program 5: clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x381703, 0x0) process_mrelease(r0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x1f, &(0x7f0000000000)={0x21, 0x0, 0x7}, 0x0) 02:36:09 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0) 02:36:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 507.776545] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 507.777688] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 507.781510] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 507.782635] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 507.783803] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:09 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x2, 0x80, 0x8, 0x1, 0x6, 0x6, 0x0, 0x8, 0x30, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x9}, 0x4000, 0x2, 0x3, 0x6, 0x7f, 0x1, 0x80, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xc) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmmsg$inet6(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="0b7598af636eae56b236f692f9dbd9210c5ae474b37fda39e8297ec4bf13679c7063b8881162fc83ab5ab35dd500260ddea270d76505c51b0784c0ad43f0b5eaca8d9faf84cfd0b42ab606fda4d82e3615e27d4303f1988f7fc0767158e0649a0e75feae66e52646ac09fc68af56290d51c8e83c0eed79ae848a6e970cea60b06d7c6e055f6004b4fe5e5965de647f597cf324b34dc3ae3a7cb7cd13c530d6ed0fab621ed4b02a1af8b5f612278d2c15d25daec5d33f3038125785b8243cb717f1c2d9d76ab66c2d104feec9d91f0c9aae47a2", 0xd3}, {&(0x7f00000002c0)="e5b81b5fc3e17312a0c90057654e6918676659b91e95df3387e70ed8d022497cb93bcd3f34594b62102311ef95e09dd1d0658638ce2e4590e0ada36278d780605bb82c82da9e70a72b9c2786fd531c5a03d150ce99117d111f0c70e5051e11ab8e0c07863325c6d8b102", 0x6a}], 0x2, &(0x7f0000000380)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x2b, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3f}]}}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x2b, 0x14, '\x00', [@generic={0x20, 0x81, "26003019a389a5641a394d2eed8afb95545107b1364c94992b5dfd6155d57af2584ad45362da0b737adb35d0673dfc3ca70562cddbcf45165ba27ec2bc5abe9796ff44648e27a607946fd6d59db7cdc649f62dcc7693cc1f2985c1988da05627d07c23744890d69fc8423e178dc9a6a8ae54dd61f8d866944ee0446cf8130ea28c"}, @ra={0x5, 0x2, 0x81f}, @pad1, @generic={0x0, 0x9, "b1e4d037a36df92ffb"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}}]}}}], 0x120}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x9, @remote, 0x1000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000500)="e153594dce736000631cdec08255e0c50704478661ac1ffd3d8804acf21eeae098eddf3648c3c54a6cd5f85e605d91624b1251ede5b9c5536deb7c23fd3eabba3aa368176b9d09abdf66a6c532588b05f634aa0e66125e290219b8189b44d920d76560039b97d0362b986bb8f7365c3b6de2e29b81e5d3bc996b76b3faea0eea881388d8427e0bf9a8d00e22a6d4a5edbd1213b2159ea05936860b343ccca857328175f1268508ea41f209947ada1e40d1afc448a4b28d7215059d7408c78305087bf18d5c", 0xc5}, {&(0x7f0000000600)="7182ca71bc686073f5a8eef31084bc2647c96863e8a0f2de76dff420256d46183c962d0f8d8aff54723e41a06eacf7dd252c886eca69d6c681d15aba8badce8e1a928aac974fa7177e1c20998228bec311872ece5562f2b1956c8a7f548ff1afdeea2c6625ca9f4a3b501a6211", 0x6d}, {&(0x7f0000000680)="7608fd7f5cb37aec651c631f87f736d7727a5b61291c4f564946abee4a9163e25de1b322c1289decb824a25258da0e13213973279e0d2d714dd8b791cf0a2984222f145496daa635a4304ad7a1c1eb22c75aaf2b4d52282ea745ccc80ded3764c0cb928f49a605be9047b877", 0x6c}, {&(0x7f0000000780)="cf47c181a0898dd3598e7f150f1d84826940176cfcecc5af72a3abba38c27fe75dda5302d91c0d2a50e0d7c107e8ff26382acb406108bcadc4011c4ff5877f5a91c4fe972facdfcebf5509ab144aab2fdfa6ddec54e009ad749d0315e068b1eb0f6beed3311d1f4638be5937ef086bf13b872ea02d38cb1317f21aa7ec316cb8713ab296f7567d6ca49566a42eec4dbfed2da6d4b8610f5725707dfce5e6dd6c97f58c6d17ec0acde5ed66897b0ee289e153464188bfc4e131aaa2947a62aa92c7ff3ca23578a2eda5f0ffaa04fe77d84b9c25e5664688edc55e2d0f00559454955a1b8d74b2273cf147f6", 0xeb}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000000880)="79bae8ae418bfd8659e245371f635b937b39755d8fbd159104bb75d6c6fdee5bfaf3e3840c947d9115ef8be6a4e5d1db712bddb1691a3a5b2d27949790d335bcd20a59ad9f7113bfaf5c4005336daeb5441169607fdecf8f80a03947b1ae7dd671f8a35a3a2e3af212cbe937e2a6dc6289e2e6b3e1def3f1a0cda13cd77e9f22022194bb76274b7cc5222ca068ec63e818a9fe9d0e3480d8cfba72423338c06406b7120047768ceab60504906cd87b700e96533adac42b7119cdc9728d4420cf0075fdbf9d3ab6c462d43279aa44238b06840bf37a0aebe4229bc3b25d6672a25f8d982ec30937907aa2780b65ff", 0xee}, {&(0x7f0000000980)="00926ba2ae20a06c69aa8e722c3a555a5655e1aa804b7705c9d31867ce27244a5eca351be559ade673f39f8a1b7659fe8a5a67e9f012844ac54d0d3a7895025c47932bd637d16abcb2de80ce5b421c11c2ac2132ecc2c10471c9c46149ef5c70d42741092ba1c0ccf50278107044b60dfdce9ed84deca0315753033dcc1d7004521693f74db3e3d6248a2a56a030d3b44fe901446f15093c5c9b4f4158fdaa909a507e769b3bec33791a57a0f7089705d07da12eb5", 0xb5}, {&(0x7f0000000a40)="e81be3e056182237e918e74669fc22f2cd22adfd5a7b1b1c7a94369c54ae03ad5a6f7ab814140d6e3aa3010b656fbfd2110086b9ed12ffae9841eef6fda73dc95e02272d9792c054f7e7e302cf7c504e3ad83b2236476ff73af73649516be1a55c3d", 0x62}, {&(0x7f0000000ac0)="790082bc9d960453c304e1840fb11dc6a81f3e2ab929805d0c302e355251778561c1b84b24035021084d7f0f9fd98cc81d80fb768164c7ba8b17672505860e3bd39b1787fd77b142e35ee84b3dc5c703376816598368cd06b2fba3112d21dc6b03c0f0835a5e5ceedff05ba72d1a002c281863e8d7232874dfc8d3620a2f0f277ca2fe9200521c7eca4231d0f32b237614cfb5e947f0ef8a5aeb48737e4dc44eac4da96f31fd7ffd4441a59c2fcc915d2d8a1ada445316805b0feedb050553dabd05fd032e76148f464ed04e", 0xcc}, {&(0x7f0000000bc0)="5736162e03f6192857e235e2ffb269721dd62ba8ad354f2276d676f83ca1355feefb997867f72e598fba335653ca45139ea756054b74d2fa74c384ae6ecfcbf1bc9b7a767f7c3bd1ba1825d914feb9f64051afa34a1e33346b412fccf1e7afb7ea27c14f5179e80c88b182f0f71a05d8ae46d2818de12312e75bf88011b477b248902df26d68a7f7fcbae927bc63a594ef2782c6e18e9e4d26b4986e97b1b83c52c5014a4beb434e6e7229b6a9b46792962e8560f613ae5af9df9c7bb1e2d98b52448d65abb3333fdf40cfb4fb95557512d285a3dc2b511b904b26e14bec8ebd0905ba4b770d094b6b9d7698f99f6d99afce31dd316d3ca0", 0xf8}], 0xa, &(0x7f0000000d80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x83}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000dc0)="2a9982ab6c9ed89ef502c6b07f816cb4644315aefc5652617bb4dbfc264f6304e37b385f1320828c78113282914f3e9755b2ac007800c89f8fb9c4d09a811027a97870df1de987df05c90ab4198088a0407aeb37da9ab7a708400047e4381430dba90b8ecf18154649aa7cb836347bb789d800bcc9323d3c201d3d0c79c42a757ec80054bebf51432c4912ea90036cfbbb019c6d376e816c3d0e65ac7f0a0efc5a57e2cdc0e8293e9e147e4c6e4e3c6556bcf23956824130af172afbe15ada69e61047c28038f1145eee5c1462236575223d281af2c05d58ac7ae9de2645f957ce8bee380e", 0xe5}, {&(0x7f0000000ec0)="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", 0xfa}, {&(0x7f0000000fc0)="97554c7f2f40ca6cc5931f0c66fa86e9c7a91bbfc313412ae924d96b5313a2d12da636c94628272d63ae8f901c0dea76173467c7b08c58b8887700327f20c5e8f40cd422386894db498b01423530d775bb0824a6c714d558376e3affbfbe1b74fd7962aeebdf5c7b03852f2325981a8d6124d851cfe99dcc73f5c038efa3", 0x7e}], 0x3, &(0x7f0000001080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2e}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x168, 0x29, 0x36, {0xc, 0x29, '\x00', [@pad1, @pad1, @generic={0x7, 0xee, "fce3bc1dbda85450aed695a847bd0a91736818a9e39558ab68b5d7ea5bd912ef6c14a1ff18b54c23986d02be3497e8dfe41b234918f3eccab7e9bee3189a03410ee49d1795771c91977b0db38f117c0779ec8ac4334f18c83b1883b77770cde905d663cc799b530003925be5dcc0d57bc1ee77ee33bb6e1206472f3d0f8290664e7a965d8d6924125d564df3410a8208cc959fd8de8e22672b935524c4ee7b1dfe9a3d5b9a1286454cb94e0b168fdad5a1598d316e3f443db5c9ed9d06baabc22f9997f8dc842f15973a2adf0594b110b405c15bb9d6c4a2e446fffdd33ed5ed65a62d0342424c1f9fb69d998bc4"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x40}, @jumbo={0xc2, 0x4, 0x3ff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x80, 0xffff, [0x0, 0xb22, 0x3f, 0xd6a9, 0x7]}}]}}}], 0x1c8}}, {{&(0x7f0000001280)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5b500272}, 0x1c, &(0x7f0000001340)=[{&(0x7f00000012c0)="6d7bf2313c105d3ba7b2ef013457d8c8d61bbf4349de3ca11119b73e7de48db7c2c17e0d95a77414f6ff789bc2e82c0e266ca7930dd6d9eb2a65544346e1c48001d3d9e5ab1e0ef0ca9073313155860ea1d12035ed41f8967f2ea6a24019aadb92cc", 0x62}], 0x1, &(0x7f0000001380)=[@hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x75}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}, @hopopts={{0x20, 0x29, 0x36, {0x3a, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}]}}}], 0x58}}], 0x4, 0x40020) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x1, 0xff}, {0x20, 0xffffffff}]}, 0x14, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1015, 0x3) 02:36:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xfffff000, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) 02:36:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@utf8}], [{@dont_measure}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@permit_directio}, {@dont_hash}, {@uid_gt}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r1}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4004084) 02:36:19 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:19 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x8, 0x0, @loopback}, 0x1c) 02:36:19 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x2, 0x80, 0x8, 0x1, 0x6, 0x6, 0x0, 0x8, 0x30, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x9}, 0x4000, 0x2, 0x3, 0x6, 0x7f, 0x1, 0x80, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xc) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmmsg$inet6(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="0b7598af636eae56b236f692f9dbd9210c5ae474b37fda39e8297ec4bf13679c7063b8881162fc83ab5ab35dd500260ddea270d76505c51b0784c0ad43f0b5eaca8d9faf84cfd0b42ab606fda4d82e3615e27d4303f1988f7fc0767158e0649a0e75feae66e52646ac09fc68af56290d51c8e83c0eed79ae848a6e970cea60b06d7c6e055f6004b4fe5e5965de647f597cf324b34dc3ae3a7cb7cd13c530d6ed0fab621ed4b02a1af8b5f612278d2c15d25daec5d33f3038125785b8243cb717f1c2d9d76ab66c2d104feec9d91f0c9aae47a2", 0xd3}, {&(0x7f00000002c0)="e5b81b5fc3e17312a0c90057654e6918676659b91e95df3387e70ed8d022497cb93bcd3f34594b62102311ef95e09dd1d0658638ce2e4590e0ada36278d780605bb82c82da9e70a72b9c2786fd531c5a03d150ce99117d111f0c70e5051e11ab8e0c07863325c6d8b102", 0x6a}], 0x2, &(0x7f0000000380)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x2b, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3f}]}}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x2b, 0x14, '\x00', [@generic={0x20, 0x81, "26003019a389a5641a394d2eed8afb95545107b1364c94992b5dfd6155d57af2584ad45362da0b737adb35d0673dfc3ca70562cddbcf45165ba27ec2bc5abe9796ff44648e27a607946fd6d59db7cdc649f62dcc7693cc1f2985c1988da05627d07c23744890d69fc8423e178dc9a6a8ae54dd61f8d866944ee0446cf8130ea28c"}, @ra={0x5, 0x2, 0x81f}, @pad1, @generic={0x0, 0x9, "b1e4d037a36df92ffb"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}}]}}}], 0x120}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x9, @remote, 0x1000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000500)="e153594dce736000631cdec08255e0c50704478661ac1ffd3d8804acf21eeae098eddf3648c3c54a6cd5f85e605d91624b1251ede5b9c5536deb7c23fd3eabba3aa368176b9d09abdf66a6c532588b05f634aa0e66125e290219b8189b44d920d76560039b97d0362b986bb8f7365c3b6de2e29b81e5d3bc996b76b3faea0eea881388d8427e0bf9a8d00e22a6d4a5edbd1213b2159ea05936860b343ccca857328175f1268508ea41f209947ada1e40d1afc448a4b28d7215059d7408c78305087bf18d5c", 0xc5}, {&(0x7f0000000600)="7182ca71bc686073f5a8eef31084bc2647c96863e8a0f2de76dff420256d46183c962d0f8d8aff54723e41a06eacf7dd252c886eca69d6c681d15aba8badce8e1a928aac974fa7177e1c20998228bec311872ece5562f2b1956c8a7f548ff1afdeea2c6625ca9f4a3b501a6211", 0x6d}, {&(0x7f0000000680)="7608fd7f5cb37aec651c631f87f736d7727a5b61291c4f564946abee4a9163e25de1b322c1289decb824a25258da0e13213973279e0d2d714dd8b791cf0a2984222f145496daa635a4304ad7a1c1eb22c75aaf2b4d52282ea745ccc80ded3764c0cb928f49a605be9047b877", 0x6c}, {&(0x7f0000000780)="cf47c181a0898dd3598e7f150f1d84826940176cfcecc5af72a3abba38c27fe75dda5302d91c0d2a50e0d7c107e8ff26382acb406108bcadc4011c4ff5877f5a91c4fe972facdfcebf5509ab144aab2fdfa6ddec54e009ad749d0315e068b1eb0f6beed3311d1f4638be5937ef086bf13b872ea02d38cb1317f21aa7ec316cb8713ab296f7567d6ca49566a42eec4dbfed2da6d4b8610f5725707dfce5e6dd6c97f58c6d17ec0acde5ed66897b0ee289e153464188bfc4e131aaa2947a62aa92c7ff3ca23578a2eda5f0ffaa04fe77d84b9c25e5664688edc55e2d0f00559454955a1b8d74b2273cf147f6", 0xeb}, {&(0x7f0000002800)="6715590d437dad69f80d62d20f5c3865179816cb6791c5e8d4acfbf33b551f8a2b78ede900d91ce462aeabbfee82b1a6edbaae02abcf643248001c5485473c1e953c81c85006fdc42bf8b36469b00386f3f8cf0839eee736ada96bd714cf649328d99017d033d3fb55360040cafbd299529670d1b071672fff497e24614bb992f62400140863dcf8a0244eb4afe694967ed962bd519f5d96993e09bfe10db770ed92ff3aa3157e98485be2838a87ca9b3365fc835ab562426164ca63b11e6b91ddba91c47dfb3780c3d04fb647201428dc71a474def3d9d766db604ecb3c17a2216da34f2e0af7986a5482117b7efe93f026b635c88c0b30e6d32916789020e88a00ca9e579be9282c13a10eaa16a627c73e88d369a5a7c9b94f56a97dfea6c9c9f9f6f87e8953ed85c1641f968daef9983f9a275d28782a12d4fc83768051bbd071dddd1600653fd97ea54d9e5ce8fe09b803db787b5350ec59a0f83031bdf0be57b99a9ac8378e3b6c3ab2908c9cb37ff821529970bc61ceafc47f55da19561cbcd6873eac5e2cde71ec2ade9a0e397a53fe5317e280e923f1052675b7cf93bdb6032efeb3a819435d40250ed69537ca7f57fed1d2c25d6607b0ec2f9fd175cb120cd96faf966befd601cd7891861c7cec268097ae1957c7fb8fa8ed3729801a18f8d2140b2ba4eb7dce7af5b86d835a92a855e5256175040feae9b6a96b4b53dd545c0a80ee1a880b44a6125d76fd5422f5570b6f88f3f611000897252489b1a892ce14f2646cabeaf9f93df760515b91f9329ab302f5db2bb263c99a8b25d2e3dbc00cc36e0017d7322a9277d6e50f66cbf96b8bb28d7bcbc59c6cceed4f1363c6465926e54b5d4f2caf556897d489d422202b60b10c3a365f7508af16c82b6de1212cb6551f0f7a6eb30106800611cabf8157a3dea62dfac672711bb8a475fb1c4e5914a6abe2d6556ed6783ec28c8cbe3c1de5e955c2ae3554f4736abe115b962731a5ce189466477be80138240b3be4bc4ad6de95b56dfa621932247c407c012ee473a7b97b16af3f8f82cda7597dd64a7272a2c5e3f43daf88ad295b155acc4b6b63bda9d1e792757080459eb14f60ae126cc2507e526ef5c47def53b8e6e6735243ef4bc445c84828ac4e01fb551d70c1edc9cb470b38c535559a81bfffe0283c924c6c4a5e3d2de2c82e7c4c8819a44d17f454d440edabbab35f61e6da04239455b3dea11dd970b212f5b48e9c362fec01f09e9ab4f8a9adfc3161ce7fcda1aa7e4e37ce9f56f602b6a9af07c5943e49a4e067f30cfde53452c25178efa8d682bce2b825d34864ce5919c25c78d794caad64930582cf85a09369fd1a45275905547325c2fd61c5e19126eab632ae3097ed069dc858e59d55015754e1e2c32368a803bc06a298d9fd286b9ed03ed01810655dcbaa803c25f75e158b5d5dacd4fd1a8be523231a4c861de4f4da6c589e1e2ec124b182d4c11542f610b1bd28cf5ea8d8b2267f20e7874b9a6b40df677e226c9bb74754eeb67f522c6819f328317ced92b44916862e7da3d8f4136754c64d9d08507b3547f3d74d148159a0e524253b327c5f18e7000931b0b483db3110921c49aaf0a1257095d79ba65d206a4b22506d9b8994ad36a10e4d8df3c7b16854ac742962800320908edc7b93e385a102b8a5f73e26368f5d0b37d2b744e81361344a5d83ea6fb433bca92d2522bf31bbaff8c2e2313224ed3867f2d23d6653bab761ae5b21726975f85951579753dae6ed0c1617370ce6a4d608691fa0641ac6474f30b7cc140af4b5cce09aec8c2a2db71040a100ef129e3621a1171c9ac9bae7704e9358780fbff0dbf54f71948943ec46558af9fdbdc24d66014c957a72a63c3d8e2020e23919acc8dae8410d4bf1ca2516cdf7937d384df986e5ef3e9aa41eb375a986c60edba6feee4ee0b3c0290b47d9380eabb7731cecc6d0b94ff791e78bb0cfce0eac7df884699b6a4f845482680defb8ea4e1de4d896fc7a912c39eb1cb5a7c259e38b3c8f0d8cd4efeefaa019bf879fade5e8be0b2804ac87d3b9f70d79382cd1f142bd6c1eacbb677d691512eb7b5c5a21c6287037ca5c52ab32ab4e9376dbdbe0201f9a36729fde10d208ee2f4db21875201fa76117ecd69d7fc6540022141c413966278058c776e6d7a9ff7403ff31e3630e782958728157d7924a15c370858fa607333be73f75a01e2d0c324bf41e59a0e5da9227fea12b7749890eae6f9653be1aa248e310b9e21ba9f84430b8f9df61844a9819b85a1eb04f95d0970a1c8bdc4dd857e491c43cb52f04d699c3d34c2cc09ad95ba77ed1eeeb2ff85b0dcfc0fa6a2d9d84f889ada0699ab230efb595f71764c44802e871f0ef39b061de6e6aa0494cf28a24ac0d1acba065cb2df1d6866430a374e19a3d8c02f194f5ce928433fd4064c8ead1ac0eeb746d921f2cdb22f371eff9deccf99ab2bf028da0cdf0f862cfce5735a774fca047d82824127def6eac8dfe240733bc473151af51d2a804fc9b3a459d8dd95525be932659a47a4c7139dec441dbd81a2107825f72b364a00c3c9d4c18a33d06d0542c47f69573c80efa05794d922f587fdc6854be5e9352fa37322a7bd887198360a145bb563b29c784c1e9482b7f2a6adab01145c2ee952e64e585a6e387d5c18f36d0861dbac1feeff0737f5b7e23257d982e11d2923c08b6ea4aef30c1be3541baf259ca920e616c7a33fe6b30e9def7bad31329cf41c0f24c06564eda3b160507a7f55ba7b79ad032e2c9be502ccd414aec913ccc7d85527f8328a1c449d4dc2aa3a08606a120c3101e17e262949a9c433ca0ccaad3a65d0c5a4963207b02bfafbb77eeead4d1f9cb49e861e0601855ee9b81079db97e7b3862ee1302d4d506b9f05d37bb670f24a0e7cd7047d0639ef6c0f74ae737b88fe69a2cbf44ee2c0d82dfba947a8d104406f99fc3d6e85563cb0722d6b59362446ca5585d643846af2a1a6c337eb3f95c4f1e0018584e6e8383b562fc8fa25147dd89602e032829dfddaf432926fd0d57bd5707fdba191fd752a75616c4c2f539d630e92079ac3057c98d4d6b7378179adee8ec1ba70b4743ef2988ac89adb0a94f8bece186dae2232872cdf28b538c590b056074fe29d0e79d12c48038f590f1b5c4a705738031a4da0dbfde688c175ead2601f990b079cd373772618070cebd4809a7c482cc2e4dcd32f136c4c2386ba60f42ba5410b5b3218d2ae18f3421c484eff5f67cac007e211c8c588d01ea22f019fd2ba005c66afc8883e16bb8a774ec8ab87a7f3245d03016edd26ddba9a889c4662559f7ad2f9a23adaa8ddc5cdf9b3ba113c0762f2d8bef1aa0c5243ff04291ad8b1aac6a975f7bed15387b4e34a1ecacda6e7d0c01aadc5adc4800db2f0c1e653848242fac3e5063a8c93339aba4d5fb44038a6d4c1e483cc9ded2bcfbb324c21978f98899ac87ebe1bd6db049c459c074342b6be989ab80c3d65031729298b66c0bf1b492346d35bb88b9b872deb1e9e749c0b907b7242f7f4236e48165351f252899fdc9d3ebe0521b704201a99c57c3b7c5f133bf9002056fe1dc49f14674d8ae60c3e920e05cc17784b58572fc5d1cf66a16bc5b17e9d199290553a64dae46234aed4a6ab35858d5125469a518bbc27574e1f00e9c0e89838b7cb792046c1b0e19cf880cd1e297a61438b602d22887a15cb65deb1212977f5fd62828849d8274d9cb1ec80df7b759449f785330a4b060f0b22388bcb2a87c479fee1b6e5df4abd11b03c1a12741130190c1ca38deaa267532b28cf8e5de35da7740a54398d12c58ee3854411ff25c411629a00b812751bfa8b2b318ba6a94b6c9ff68c57219c2a2afef9eeca7106627980efcf2c6b99535d0914278975cb9951175cae5afa30169970bae0d3af3413770bbb14e5599d159f0c756205753ca320b21e995b7ffceff09e05d483c8bb21f8b2cd4de27fbb29083ec5bedd3e71504ddc08bd2715b46c751b3ce1f9722c6291bbb184d5221c654eec8582a91c0e5ed710190a7114c72ee42192880fd8ffa5149c4c13ac9eee73d679cbbfe07a65adf7fdfc5458c7c97560fd8eb15f4a1cca0235a171d7b1a2e7557ec3a546685b943668f92505c44b5265baeab0b9e1e6023bb8c78d4e8dc27f0a14c19af74941cbda91986315e37a1d4a4ccd539a373ba92b9137c465759485c867a286ee1e5169c3158ba4d979cd3bb57072da12df2e5e2ea6aeb15a0e096cfa459cbf9c8f0114157a42d622b0edec5e10fe2a620608ff341b54ac52ab22d6fb5b654ebd719c6fe3223df7467ce925af29c4e410114c07a7ccf7aaa09eb2a3ae8938bdd0c13dce3921ec48b4a33ed6623b85991a95ba0cd77bc7274babb1cffce09d7fe9fd958aaab80f038737abac41dc1b4387cac3128ee1a9de86bc911632201a92b866c71d79b3a0a3612774fab27877c17bf7f2b0f64f1db226183e7ad136aefd4e68dcbd1f4caa7c5649e641cc0c29f92ad3c970dad0ca84d12d1b99717694bba9521a9dcdb4d90e5eff7f6f678ae1dfc461ba85573acebaeb8009458328fdfe7d122d291bae19819c9cb32137a4f871f253a2ab61484895ffdf78c86dedfc4e049aa3a84d106d948094bb1b2d266fbf33adcf1a10321dd0b0d528310776e07c784553a0733e6f8e397560b1ca809f774dd335adc27d22f619bb88e3b0ca6b509ac95ca8a79e595ecc3cc8eda29877f33ee723a75f18f118a44df68bdf86530f1ed63f1b24241a22117bb24b30b7d1612f2e111c9665cce46d145d3ab8b73e20b8c47df3c49d8b055e73ac91b447f49e6b7388cfd0370183231c408d39783754fffd58308d0efc44d7ea74a3861e28a87f6acb7e68c0d18f9e72af253e418ec31539329090f3db4ba9984c0fbb040ea494a8f73f2a09c885ad4d7355d9334ac24a3a1fa283538f1782b5057a4311da5d3899dc3f6ebd2ff1333f7408a00b5a3eea4df7e9046a6d5e5a3b31de7358aeb62ffa9cdf6114adac125303b53feeb15708757999aba89523c43af2628dd4da7ab3b3fe8f41baf2d4f3ddfb39296d077d85af3d08c35e220c6fe6f73e5423a47e3fc9178b5f565fa35cd599b3234f5804823ffb391191ef13c9923a54accda0c51517d5632688d06ccd4452ad9696069ee2bb9df43ed46d13615649fc648d9b5e31f4dc15c0cc482b9411275b2aed05d56f9931c1f1bc8fb63651e2b2b8cf1141fab9fa2fac442637e089aa7194238e12a614f5762677c458b74a2ee1015995168dd84bb1823ad261f83abe8e2fd5a6b70b6bc660e2dabd29ad223825ce50f4c6ca3ceb05f1a105a52fb12fe6a0f21f18b60546eb8c1929864b19814004da048512a3ced2b9deef4e7b75d4a355081448083a886a944a22fcab91b27b4011ce85b8b30ad0d46a6380b3cd70858b8bc3478ce0ed0a2d6b3c9f61b6ff22ee11ef09d1384a9e411bf411ebd8af652c5061b908d36164abcceae04807e0b6d982fe9bb2514a1b6b3f72aff8e1c341cb8d4a290a68c85891961719d23df61d2e361d44622869507161ca86deea39fab6cfee26179ead73b41a1b14586cfed9f3a2d034bc834080dae2c533f43cedc2391bde202829c52e53c66647b392c4db297594ad30b7218bebf36c317d1484d7a84f7a4deafbdc105f0d3020d5a4dc62c62474022a842b96a7e46de045fdaf71adf5a5f4b4127d7804ede5dd8fa464b5f4d99a8e838173bfbc5d98b7f8ea4ebf81939d19be45445fd6852a88e6c7759fb753aca8f10f69b2746ccfc", 0x1000}, {&(0x7f0000000880)="79bae8ae418bfd8659e245371f635b937b39755d8fbd159104bb75d6c6fdee5bfaf3e3840c947d9115ef8be6a4e5d1db712bddb1691a3a5b2d27949790d335bcd20a59ad9f7113bfaf5c4005336daeb5441169607fdecf8f80a03947b1ae7dd671f8a35a3a2e3af212cbe937e2a6dc6289e2e6b3e1def3f1a0cda13cd77e9f22022194bb76274b7cc5222ca068ec63e818a9fe9d0e3480d8cfba72423338c06406b7120047768ceab60504906cd87b700e96533adac42b7119cdc9728d4420cf0075fdbf9d3ab6c462d43279aa44238b06840bf37a0aebe4229bc3b25d6672a25f8d982ec30937907aa2780b65ff", 0xee}, {&(0x7f0000000980)="00926ba2ae20a06c69aa8e722c3a555a5655e1aa804b7705c9d31867ce27244a5eca351be559ade673f39f8a1b7659fe8a5a67e9f012844ac54d0d3a7895025c47932bd637d16abcb2de80ce5b421c11c2ac2132ecc2c10471c9c46149ef5c70d42741092ba1c0ccf50278107044b60dfdce9ed84deca0315753033dcc1d7004521693f74db3e3d6248a2a56a030d3b44fe901446f15093c5c9b4f4158fdaa909a507e769b3bec33791a57a0f7089705d07da12eb5", 0xb5}, {&(0x7f0000000a40)="e81be3e056182237e918e74669fc22f2cd22adfd5a7b1b1c7a94369c54ae03ad5a6f7ab814140d6e3aa3010b656fbfd2110086b9ed12ffae9841eef6fda73dc95e02272d9792c054f7e7e302cf7c504e3ad83b2236476ff73af73649516be1a55c3d", 0x62}, {&(0x7f0000000ac0)="790082bc9d960453c304e1840fb11dc6a81f3e2ab929805d0c302e355251778561c1b84b24035021084d7f0f9fd98cc81d80fb768164c7ba8b17672505860e3bd39b1787fd77b142e35ee84b3dc5c703376816598368cd06b2fba3112d21dc6b03c0f0835a5e5ceedff05ba72d1a002c281863e8d7232874dfc8d3620a2f0f277ca2fe9200521c7eca4231d0f32b237614cfb5e947f0ef8a5aeb48737e4dc44eac4da96f31fd7ffd4441a59c2fcc915d2d8a1ada445316805b0feedb050553dabd05fd032e76148f464ed04e", 0xcc}, {&(0x7f0000000bc0)="5736162e03f6192857e235e2ffb269721dd62ba8ad354f2276d676f83ca1355feefb997867f72e598fba335653ca45139ea756054b74d2fa74c384ae6ecfcbf1bc9b7a767f7c3bd1ba1825d914feb9f64051afa34a1e33346b412fccf1e7afb7ea27c14f5179e80c88b182f0f71a05d8ae46d2818de12312e75bf88011b477b248902df26d68a7f7fcbae927bc63a594ef2782c6e18e9e4d26b4986e97b1b83c52c5014a4beb434e6e7229b6a9b46792962e8560f613ae5af9df9c7bb1e2d98b52448d65abb3333fdf40cfb4fb95557512d285a3dc2b511b904b26e14bec8ebd0905ba4b770d094b6b9d7698f99f6d99afce31dd316d3ca0", 0xf8}], 0xa, &(0x7f0000000d80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x83}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000dc0)="2a9982ab6c9ed89ef502c6b07f816cb4644315aefc5652617bb4dbfc264f6304e37b385f1320828c78113282914f3e9755b2ac007800c89f8fb9c4d09a811027a97870df1de987df05c90ab4198088a0407aeb37da9ab7a708400047e4381430dba90b8ecf18154649aa7cb836347bb789d800bcc9323d3c201d3d0c79c42a757ec80054bebf51432c4912ea90036cfbbb019c6d376e816c3d0e65ac7f0a0efc5a57e2cdc0e8293e9e147e4c6e4e3c6556bcf23956824130af172afbe15ada69e61047c28038f1145eee5c1462236575223d281af2c05d58ac7ae9de2645f957ce8bee380e", 0xe5}, {&(0x7f0000000ec0)="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", 0xfa}, {&(0x7f0000000fc0)="97554c7f2f40ca6cc5931f0c66fa86e9c7a91bbfc313412ae924d96b5313a2d12da636c94628272d63ae8f901c0dea76173467c7b08c58b8887700327f20c5e8f40cd422386894db498b01423530d775bb0824a6c714d558376e3affbfbe1b74fd7962aeebdf5c7b03852f2325981a8d6124d851cfe99dcc73f5c038efa3", 0x7e}], 0x3, &(0x7f0000001080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2e}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x168, 0x29, 0x36, {0xc, 0x29, '\x00', [@pad1, @pad1, @generic={0x7, 0xee, "fce3bc1dbda85450aed695a847bd0a91736818a9e39558ab68b5d7ea5bd912ef6c14a1ff18b54c23986d02be3497e8dfe41b234918f3eccab7e9bee3189a03410ee49d1795771c91977b0db38f117c0779ec8ac4334f18c83b1883b77770cde905d663cc799b530003925be5dcc0d57bc1ee77ee33bb6e1206472f3d0f8290664e7a965d8d6924125d564df3410a8208cc959fd8de8e22672b935524c4ee7b1dfe9a3d5b9a1286454cb94e0b168fdad5a1598d316e3f443db5c9ed9d06baabc22f9997f8dc842f15973a2adf0594b110b405c15bb9d6c4a2e446fffdd33ed5ed65a62d0342424c1f9fb69d998bc4"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x40}, @jumbo={0xc2, 0x4, 0x3ff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x80, 0xffff, [0x0, 0xb22, 0x3f, 0xd6a9, 0x7]}}]}}}], 0x1c8}}, {{&(0x7f0000001280)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5b500272}, 0x1c, &(0x7f0000001340)=[{&(0x7f00000012c0)="6d7bf2313c105d3ba7b2ef013457d8c8d61bbf4349de3ca11119b73e7de48db7c2c17e0d95a77414f6ff789bc2e82c0e266ca7930dd6d9eb2a65544346e1c48001d3d9e5ab1e0ef0ca9073313155860ea1d12035ed41f8967f2ea6a24019aadb92cc", 0x62}], 0x1, &(0x7f0000001380)=[@hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x75}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}, @hopopts={{0x20, 0x29, 0x36, {0x3a, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}]}}}], 0x58}}], 0x4, 0x40020) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x1, 0xff}, {0x20, 0xffffffff}]}, 0x14, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1015, 0x3) [ 518.680515] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 518.681659] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 518.684331] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 518.685466] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 518.693114] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:20 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 02:36:20 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x1d8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1cb7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3761, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40d0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/119, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x188, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa7}, @NL80211_ATTR_IE={0x126, 0x2a, [@random_vendor={0xdd, 0x7, "6fac83102972d0"}, @mesh_chsw={0x76, 0x6, {0x9, 0x1, 0xf, 0x400}}, @tim={0x5, 0xf0, {0x81, 0x7b, 0x5, "94dd14cee0f23d7e48bc2e67d33de4405426144d4ac5cbe4646282e256bcfd377c71fe342c449c433ff73d0b55dffac14ea59b88e684f547bfcfe25ba277e2b85dba63bb796d4fb2e45938534f0fb21b1338ffff4d1ebbdec5e3b90da8c9861d8b095db65639431ed58ad4ac6673ac684a07cb71dd444580af6dc25ba56572689bd53542d39901b7c54775e5c8e5aa0d3449256342250470a78e7f2a6e140339e05915806f15a5f6b91b47c88e7d90f9ac8c63e35c16d0b25375863b74eaa51a258c2e76f9540f2b9839fc45a58b6df47cc7ea7ce988b7b2a4f33077ea7174dac89de790460bb476ea363064d8"}}, @mesh_chsw={0x76, 0x6, {0x7, 0x3, 0x31, 0x1000}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x3, 0x7f, @broadcast, 0x3, 0x40, 0x5}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}]}, 0x188}, 0x1, 0x0, 0x0, 0x2404c010}, 0x8004) r4 = io_uring_setup(0x6bcb, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000900)={0x1140, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x57}}}}, [@NL80211_ATTR_FRAME_MATCH={0xf2, 0x5b, "00d5721788c9ac63409238da3ef81b523fb5c6c8c7acb4e6975b90f19229c016338aa5113dedab32a4f24004e02b999ba3539ebd08e8076e4df2f1f5ddb46b264c57189a65945bb48a95a531ea5264582ea04c1e235805a4f4980ec87762995a9d03f952f26b6de992a2da6f5b0aaf47a913e7676f1d145eeae97776484611fe74138df278511faad6993ee07667490995f372d29da94d43476befcc719ceb7b3b56a75ccfb5b8b4aee4379c64a6946542bc0e4876c0f2ed1f266e99c0c4be0b72b2e103fcaf273d9e29c900fd6d0a982b99754bc9fb21c55fdaa9f7723f40701382a5463d24276fe574c9050200"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3f}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x1140}, 0x1, 0x0, 0x0, 0x840}, 0x4) io_uring_enter(r4, 0x0, 0x0, 0x7, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000480), 0x1ff, 0x80) sendmsg$nl_netfilter(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0xe, 0x7, 0x801, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0xa}, [@generic="b57241a88a4d29b1e1ab5283f446d0e6e518172b05439ec19d19005f2a6e916d5a0528c5720525c6e743698e93"]}, 0x44}}, 0x800) [ 518.870215] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 518.872637] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 518.878608] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 518.879743] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 518.880917] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x9, 0xcab, 0x62, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x40000000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x7fffffff, 0x2, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x68, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0x6, "ad7e2868"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x81, 0x10000, 0x24, @private0, @empty, 0x7800, 0x700, 0x1c0000, 0x34}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1dc, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1dc}}, 0x2400c805) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 02:36:20 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xffffff9e, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 519.026097] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 519.027201] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 519.031280] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 519.032362] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 519.033437] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 02:36:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:20 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:20 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000400)="53595a4b414c4c45522020080000ea80325532510000ea80325100000000008bc013cd69006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010d6a0bc9e241a4243873a26c720767b", 0x5b, 0x600}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b9e9e572e2dbecbaa2f66c657d475adc341d718d7806afc894afd060d63acbe7a3"]) renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 02:36:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:20 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 519.290529] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 519.296209] Bluetooth: hci5: ACL packet for unknown connection handle 2745 02:36:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x0) 02:36:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 519.318146] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 519.322239] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 519.325142] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:31 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/243, 0xf3) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:36:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xa, 0x0, @loopback}, 0x1c) 02:36:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) 02:36:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:36:31 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff87}, 0x1c) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:36:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:31 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 529.892138] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 529.896081] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 529.898448] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 529.899091] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 529.900787] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xf, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:36:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x180, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:31 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 02:36:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x33fe0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 530.031810] FAULT_INJECTION: forcing a failure. [ 530.031810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.032763] CPU: 0 UID: 0 PID: 6197 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 530.032779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 530.032786] Call Trace: [ 530.032791] [ 530.032795] dump_stack_lvl+0xfa/0x120 [ 530.032815] should_fail_ex+0x4d7/0x5e0 [ 530.032844] _copy_from_user+0x30/0xd0 [ 530.032866] copy_msghdr_from_user+0x88/0x150 [ 530.032885] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 530.032904] ? __pfx_perf_trace_lock+0x10/0x10 [ 530.032925] ? lock_acquire+0x15e/0x2d0 [ 530.032943] ___sys_sendmsg+0xdc/0x1b0 [ 530.032962] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.032977] ? perf_trace_lock+0xb5/0x5d0 [ 530.032996] ? __pfx_perf_trace_lock+0x10/0x10 [ 530.033012] ? proc_fail_nth_write+0x97/0x220 [ 530.033031] ? lock_acquire+0x15e/0x2d0 [ 530.033046] ? __fget_files+0x34/0x3b0 [ 530.033060] ? find_held_lock+0x2b/0x80 [ 530.033070] ? __fget_files+0x203/0x3b0 [ 530.033082] ? lock_release+0xc8/0x270 [ 530.033100] ? __fget_files+0x20d/0x3b0 [ 530.033119] __sys_sendmsg+0x150/0x200 [ 530.033135] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.033155] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 530.033174] ? ksys_write+0x1a3/0x240 [ 530.033186] ? __pfx_ksys_write+0x10/0x10 [ 530.033203] do_syscall_64+0xbf/0x420 [ 530.033218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.033232] RIP: 0033:0x7fbc1b8dfb19 [ 530.033242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.033253] RSP: 002b:00007fbc18e55188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.033265] RAX: ffffffffffffffda RBX: 00007fbc1b9f2f60 RCX: 00007fbc1b8dfb19 [ 530.033273] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 530.033280] RBP: 00007fbc18e551d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.033287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.033294] R13: 00007ffd74d281df R14: 00007fbc18e55300 R15: 0000000000022000 [ 530.033311] 02:36:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 530.120991] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 530.121659] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 530.128123] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 530.128698] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 530.132246] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:43 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x8, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 541.708275] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 541.709793] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 541.711341] Bluetooth: hci5: ISO packet for unknown connection handle 1106 02:36:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 02:36:43 executing program 2: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) io_submit(r0, 0x4, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x40, 0xffffffffffffffff, &(0x7f0000000140)="efcc5d13d5dce9f73df7ba30dd8c8e9cba8238c4a480d118d193b5c75f1fe0497e4044a45f58f44d6d4f00d14afe285fa142ac6777e0f2d3cb2557e95ab89aab918af2f35d2d40ba87fedbf161534e509d6a8deae46415ce4e8f02f0effee8261acf51ad78a6fe2fb7dffb506db3a6a15e728e0880dc5c2cf5ef34405beed21f095d6a5debe26a17c1c8b99eedad4d6669b67ec7f1973d10a15eeaea33f670e9fbb28bb5789fbed071a995893b7620a16273c923", 0xb4, 0x40000000, 0x0, 0x1, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfffb, 0xffffffffffffffff, &(0x7f0000000240)="98878809c23346c5cab0bb72ee2aee0f37679536262c4bbc38ec4caeb985494d088529ae9e9c518a04a54bf3f43267d87b39b8a38d07229d3e550a1b4f638fabe86887fd99b5078b7451ae823e4c3938b500eaf295f538f51985fd21903119b8ca8373a7c94458a1f97e5579c6fe59b14ced7fc68555069a7f7bd0d1c4d5495a39ad403cb1338d0439262ee54348227ecedc1ad829518751a49fa615e6a62a6a8329472b93ee076e6eb06f88875315b509068a400ac5190ef475fde88e264efe9ba38d66484305ff", 0xc8, 0x6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000380)="fba2ccd073fc29324a32443832135c0ddcb230e165e54e54e8b6d57376a2eaf59850c0404e5cb5b8ec8295de1946eab00cdfd295cef309f10ed34c39feb18883e771445304cbabbf670d7b640b14e7145b1b80c18b458ffb41728afc1c112b82f71faee8277e0bb96f79cac0d9db48cc2dba69cb56fffd27e76d5817a2ce3a4f623dfbf4f71256bed6a7bd031f8b14cddb08a0c4165a6c870633277061b40b6e7df8d491d7d73800c9c2673b85c318957cd28325501dfa9e5c1afd746c2310d2887a9f22", 0xc4, 0x7f}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f00000004c0)="dac90d2eab53d2024f5a5b2d57c1333e9630823b7fdbf2718be2e7ea8983ef55e335fa95a6ff7bbfc77b56f3d5c4ed3a0a4af668d3802b60ca0736305f7f2e235fa7a71109740621883eb621d2aa15fc372e0bef37fe393aa478e8dacf48bee52dd385eac8ca9a5615478948074e4c31b12ca9342fad7b03be5355872a3a735bbe213a352c7dd08c3fe0d124e4ff0220d27a4cd7aa2f124baa", 0x99, 0x7, 0x0, 0x3}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r3, 0x0, r4, 0x0, 0x7ff, 0x0) 02:36:43 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e0000000000000005040401", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xe, 0x0, @loopback}, 0x1c) 02:36:43 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2d2fe4696c653000"]) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000340)=""/254, 0xfe}) [ 541.717561] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 541.718848] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:43 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e0000000000000005040401", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) [ 541.835297] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 541.839426] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 541.855305] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 541.857139] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 541.860525] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0xc, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 02:36:43 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e0000000000000005040401", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 542.005285] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 542.006571] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 542.011914] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 542.012988] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 542.014134] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 02:36:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xe, 0x0, @loopback}, 0x1c) 02:36:55 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:36:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x202, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 02:36:55 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:55 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x423, &(0x7f0000000080)={[{@mode}]}) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='qnx4\x00', 0x4080, 0x0) 02:36:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x18, 0x0, @loopback}, 0x1c) 02:36:55 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e0000000000000005040401", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 553.638368] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 553.641150] Bluetooth: hci4: ACL packet for unknown connection handle 2745 [ 553.642952] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 553.644422] Bluetooth: hci4: ISO packet for unknown connection handle 1106 02:36:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x40000000, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000082303000000000000000004000080"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) [ 553.695145] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 553.698528] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 553.704261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6275 comm=syz-executor.4 [ 553.713915] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 553.715332] Bluetooth: hci5: ISO packet for unknown connection handle 1106 02:36:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x20c, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 553.720918] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 02:36:55 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:36:55 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 553.841990] FAULT_INJECTION: forcing a failure. [ 553.841990] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:36:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 553.853550] CPU: 1 UID: 0 PID: 6284 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 553.853568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 553.853576] Call Trace: [ 553.853580] [ 553.853585] dump_stack_lvl+0xfa/0x120 [ 553.853606] should_fail_ex+0x4d7/0x5e0 [ 553.853631] _copy_from_iter+0x279/0x15f0 [ 553.853653] ? __virt_addr_valid+0x1c6/0x5d0 [ 553.853668] ? find_held_lock+0x2b/0x80 [ 553.853680] ? __virt_addr_valid+0x2e8/0x5d0 [ 553.853693] ? __pfx__copy_from_iter+0x10/0x10 [ 553.853714] ? __virt_addr_valid+0x100/0x5d0 [ 553.853728] ? __check_object_size+0x5b3/0x980 [ 553.853752] netlink_sendmsg+0x800/0xd80 [ 553.853775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.853800] ____sys_sendmsg+0xa34/0xbf0 [ 553.853814] ? copy_msghdr_from_user+0xfb/0x150 [ 553.853830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.853848] ? lock_acquire+0x15e/0x2d0 [ 553.853865] ___sys_sendmsg+0x10f/0x1b0 [ 553.853884] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.853899] ? perf_trace_lock+0xb5/0x5d0 [ 553.853919] ? __pfx_perf_trace_lock+0x10/0x10 [ 553.853934] ? proc_fail_nth_write+0x97/0x220 [ 553.853954] ? lock_acquire+0x15e/0x2d0 [ 553.853969] ? __fget_files+0x34/0x3b0 [ 553.853982] ? find_held_lock+0x2b/0x80 [ 553.853993] ? __fget_files+0x203/0x3b0 [ 553.854005] ? lock_release+0xc8/0x270 [ 553.854027] ? __fget_files+0x20d/0x3b0 [ 553.854046] __sys_sendmsg+0x150/0x200 [ 553.854062] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.854085] ? __pfx_ksys_write+0x10/0x10 [ 553.854103] do_syscall_64+0xbf/0x420 [ 553.854119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.854132] RIP: 0033:0x7fbc1b8dfb19 [ 553.854141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 553.854153] RSP: 002b:00007fbc18e55188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.854165] RAX: ffffffffffffffda RBX: 00007fbc1b9f2f60 RCX: 00007fbc1b8dfb19 [ 553.854173] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 553.854181] RBP: 00007fbc18e551d0 R08: 0000000000000000 R09: 0000000000000000 [ 553.854188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.854194] R13: 00007ffd74d281df R14: 00007fbc18e55300 R15: 0000000000022000 [ 553.854211] 02:36:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x80, 0x3, 0x5}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240)="d775223c2cfd1659131c1635be0ca4a6022d81481647384956b7", 0x1a, 0x200}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="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", 0xfde, 0xffffffffffffffff, 0x0, 0x2}]) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0xfdef) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="0101000001000020189afcef4049299e2800e970bb5406a141313f620708b434b174e83f81dca2b1451758d64ff9b477c92f6fc4b9ad000000000000000000", @ANYRES32]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 553.915142] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 553.928393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6291 comm=syz-executor.4 [ 553.930966] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 553.935434] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 553.936618] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 553.937790] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:36:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) 02:36:55 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) sync() sync() [ 554.016874] FAULT_INJECTION: forcing a failure. [ 554.016874] name failslab, interval 1, probability 0, space 0, times 0 [ 554.018886] CPU: 0 UID: 0 PID: 6297 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 554.018917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.018931] Call Trace: [ 554.018939] [ 554.018948] dump_stack_lvl+0xfa/0x120 [ 554.018981] should_fail_ex+0x4d7/0x5e0 [ 554.019034] should_failslab+0xc2/0x120 [ 554.019061] __kmalloc_noprof+0xd6/0x880 [ 554.019096] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 554.019145] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 554.019183] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 554.019229] genl_family_rcv_msg_doit+0xab/0x2f0 [ 554.019278] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 554.019322] ? cap_capable+0xdb/0x380 [ 554.019363] ? security_capable+0x2f/0x90 [ 554.019400] ? ns_capable+0xe2/0x120 [ 554.019442] genl_rcv_msg+0x532/0x7e0 [ 554.019482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.019519] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 554.019556] ? __pfx_nl80211_start_ap+0x10/0x10 [ 554.019582] ? __pfx_nl80211_post_doit+0x10/0x10 [ 554.019615] ? __lock_acquire+0x451/0x2250 [ 554.019657] netlink_rcv_skb+0x147/0x430 [ 554.019690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.019729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.019778] ? netlink_deliver_tap+0x1ae/0xce0 [ 554.019815] genl_rcv+0x28/0x40 [ 554.019847] netlink_unicast+0x5a7/0x870 [ 554.019885] ? __pfx_netlink_unicast+0x10/0x10 [ 554.019919] ? __virt_addr_valid+0x100/0x5d0 [ 554.019958] netlink_sendmsg+0x8a3/0xd80 [ 554.019997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.020046] ____sys_sendmsg+0xa34/0xbf0 [ 554.020072] ? copy_msghdr_from_user+0xfb/0x150 [ 554.020104] ? __pfx_____sys_sendmsg+0x10/0x10 02:36:55 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 554.020139] ? lock_acquire+0x15e/0x2d0 [ 554.020173] ___sys_sendmsg+0x10f/0x1b0 [ 554.020206] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.020235] ? perf_trace_lock+0xb5/0x5d0 [ 554.020272] ? __pfx_perf_trace_lock+0x10/0x10 [ 554.020302] ? proc_fail_nth_write+0x97/0x220 [ 554.020338] ? lock_acquire+0x15e/0x2d0 [ 554.020366] ? __fget_files+0x34/0x3b0 [ 554.020391] ? find_held_lock+0x2b/0x80 [ 554.020413] ? __fget_files+0x203/0x3b0 [ 554.020437] ? lock_release+0xc8/0x270 [ 554.020471] ? __fget_files+0x20d/0x3b0 [ 554.020508] __sys_sendmsg+0x150/0x200 [ 554.020539] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.020583] ? __pfx_ksys_write+0x10/0x10 [ 554.020619] do_syscall_64+0xbf/0x420 [ 554.020648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.020673] RIP: 0033:0x7fbc1b8dfb19 [ 554.020691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.020714] RSP: 002b:00007fbc18e55188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.020737] RAX: ffffffffffffffda RBX: 00007fbc1b9f2f60 RCX: 00007fbc1b8dfb19 [ 554.020752] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 554.020766] RBP: 00007fbc18e551d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.020780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.020793] R13: 00007ffd74d281df R14: 00007fbc18e55300 R15: 0000000000022000 [ 554.020828] [ 554.148371] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 554.151864] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 554.185194] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 554.186677] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 554.188693] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:05 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r0, 0xdcf4e000) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) 02:37:05 executing program 2: clock_gettime(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='projid_map\x00') timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 02:37:05 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x2, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x67e9, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) readahead(r0, 0x0, 0x0) 02:37:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x32, 0x0, @loopback}, 0x1c) 02:37:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) [ 564.051443] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 564.055726] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 564.061275] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 564.062825] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 564.065006] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) [ 564.112356] ======================================================= [ 564.112356] WARNING: The mand mount option has been deprecated and [ 564.112356] and is ignored by this kernel. Remove the mand [ 564.112356] option from the mount to silence this warning. [ 564.112356] ======================================================= 02:37:05 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 564.138762] FAULT_INJECTION: forcing a failure. [ 564.138762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.140748] CPU: 0 UID: 0 PID: 6329 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 564.140778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.140791] Call Trace: [ 564.140798] [ 564.140807] dump_stack_lvl+0xfa/0x120 [ 564.140840] should_fail_ex+0x4d7/0x5e0 [ 564.140883] _copy_to_user+0x32/0xd0 [ 564.140925] simple_read_from_buffer+0xe0/0x180 [ 564.140968] proc_fail_nth_read+0x18a/0x240 [ 564.141000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.141039] ? security_file_permission+0x22/0x90 [ 564.141068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.141098] vfs_read+0x1eb/0xc70 [ 564.141122] ? __pfx___mutex_lock+0x10/0x10 [ 564.141145] ? __fget_files+0x34/0x3b0 [ 564.141169] ? __pfx_vfs_read+0x10/0x10 [ 564.141191] ? lock_release+0xc8/0x270 [ 564.141227] ? __fget_files+0x20d/0x3b0 [ 564.141263] ksys_read+0x121/0x240 [ 564.141283] ? __pfx_ksys_read+0x10/0x10 [ 564.141316] do_syscall_64+0xbf/0x420 [ 564.141344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.141368] RIP: 0033:0x7fbc1b89269c [ 564.141386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 564.141406] RSP: 002b:00007fbc18e55170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.141428] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007fbc1b89269c [ 564.141442] RDX: 000000000000000f RSI: 00007fbc18e551e0 RDI: 0000000000000004 [ 564.141455] RBP: 00007fbc18e551d0 R08: 0000000000000000 R09: 0000000000000000 [ 564.141468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.141481] R13: 00007ffd74d281df R14: 00007fbc18e55300 R15: 0000000000022000 [ 564.141514] [ 564.172265] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 564.179602] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 564.181073] Bluetooth: hci5: ISO packet for unknown connection handle 1106 02:37:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200), 0x4, &(0x7f0000000180)) [ 564.182268] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 564.187959] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 564.245931] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 02:37:05 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x3, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:05 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) write$P9_RSTAT(r1, &(0x7f0000000000)={0x41, 0x7d, 0x1, {0x0, 0x3a, 0x3, 0x1, {0x8, 0x1, 0x6}, 0x28080000, 0x6, 0x805c, 0x7, 0x4, '/)/*', 0x1, '\x00', 0x1, '\x00', 0x1, '\x00'}}, 0x41) r2 = syz_io_uring_setup(0x451e, &(0x7f00000001c0)={0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r2, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r2) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) [ 564.286173] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 02:37:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 564.320336] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 564.322186] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 564.333861] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 564.342774] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 564.345099] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:15 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/119, 0x10) write$P9_RSTAT(r1, &(0x7f0000000000)={0x41, 0x7d, 0x1, {0x0, 0x3a, 0x3, 0x1, {0x8, 0x1, 0x6}, 0x28080000, 0x6, 0x805c, 0x7, 0x4, '/)/*', 0x1, '\x00', 0x1, '\x00', 0x1, '\x00'}}, 0x41) r2 = syz_io_uring_setup(0x451e, &(0x7f00000001c0)={0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r2, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r2) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 02:37:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x20}}], 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) 02:37:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3c, 0x0, @loopback}, 0x1c) 02:37:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:15 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x8, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:15 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r0, 0xdcf4e000) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) [ 574.644597] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 574.652132] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 574.664285] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 574.683105] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 574.684416] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 574.686230] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 02:37:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_destroy(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 02:37:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:16 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x9, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 574.870274] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 574.871606] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 574.872883] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 574.874150] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 574.875221] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:16 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 575.072318] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 575.074417] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 575.077840] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 575.079967] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 575.084259] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:26 executing program 5: r0 = syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) lgetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@random={'system.', '+/+\x00'}, &(0x7f00000004c0)=""/109, 0x6d) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000240)=""/164, 0xa4}], 0x4, &(0x7f0000000340)=""/119, 0x77}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x6a0a00, 0x0) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r1, &(0x7f00000005c0)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='nr_blocs=e\a,\x00']) mkdirat(r0, &(0x7f0000000400)='./file0/file0\x00', 0x4) 02:37:26 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xe5, 0x4) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e25, 0x404, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @empty, 0xfffffff9}, 0x1c) shutdown(r0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0xd9804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:37:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_destroy(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 02:37:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x75, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:26 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:26 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4a, 0x0, @loopback}, 0x1c) [ 585.159575] tmpfs: Unknown parameter 'nr_blocs' [ 585.166383] tmpfs: Unknown parameter 'nr_blocs' [ 585.190103] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 585.192546] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 585.197813] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 585.199803] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 585.208341] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfc, 0x0, @loopback}, 0x1c) 02:37:35 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xe5, 0x4) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e25, 0x404, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @empty, 0xfffffff9}, 0x1c) shutdown(r0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0xd9804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 02:37:35 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:35 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0xf0, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:35 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:35 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/119, 0x10) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x9d, 0x4, 0x12, 0x10, "e7206a518c8c32ed68aeff66d4bbd530eca7d920747a5431166cd4e4a24551d8bb36fab42f90fc0d4eafad7f7cc931268c425fa1861383525ce76c747812e46e", "922a307b142914d13f5b5ffee4563b7bdfe70855aa35c46d5f16630c547ea469", [0x1ff, 0xffffffffffffffe0]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r1, &(0x7f0000000080)=""/203, 0xcb, 0x7d) [ 593.839547] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 593.840414] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 593.842632] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 593.843266] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 593.844457] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:35 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 593.869848] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 593.870663] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 593.872160] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 593.872814] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 593.873999] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:45 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 02:37:45 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000020000100000000000000000002"], 0x28}], 0x1}, 0x0) 02:37:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x300, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:45 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd9) r0 = clone3(&(0x7f0000005880)={0x14f804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x20, 0x3, 0x63, 0x0, 0x6, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x100}, 0x4, 0xa0, 0x8, 0x7, 0x765, 0x0, 0x4d6f, 0x0, 0x400, 0x0, 0x6}, r0, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x3f, 0xc1, 0x1f, 0x0, 0x1, 0x21029, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb4a, 0x4, @perf_config_ext={0xcfb3, 0x8}, 0x4000, 0x8, 0x2eaff2f6, 0x7, 0x8, 0x7, 0x8, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r1, 0x0, r2, 0x9) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x40, 0x3, 0x40, 0x98, 0x0, 0x7, 0x26201, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffffffff71c4, 0x6}, 0x40, 0x4, 0x3, 0x3, 0x8000, 0x3, 0x55, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0x7, r2, 0x0) 02:37:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x1f4, 0x0, @loopback}, 0x1c) [ 604.707619] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 604.709522] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 604.716694] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 604.721206] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 604.727624] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:46 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x900, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:46 executing program 5: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xfa5, 0xfffff000) syz_emit_ethernet(0xd7, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08050201fb78cee79b7163b48d664a1bdbc5123fefbdfa7ac1332de40071e3a5000e7bcd477b604a09a247d82571e7e1ba2c5c7b52e6c0965c2afb5f2c3c501dfe6083d82010463f5b30f253dc5095e8f1fd2f6d80ffa6c21019ada2626f744334e26a66f46331ff0a0b2a519bde6aa6f8a00f2c2c0a6b1f34068b597751ea5ab96ae48b7d4fb3b224d68aae3f3d5b03d339212a9ea46752e422dca0d9c7e4122b949ac375f1af49a8b2cc2abfc7d994310d10a7b74d66ec0c5a25d63642c1372c6a74a05411c44dede97c"], &(0x7f0000000000)={0x1, 0x4, [0x498, 0x79e, 0x93a, 0x42d]}) 02:37:46 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 604.895141] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 604.919227] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 604.920623] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 604.921990] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 604.927155] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:46 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:46 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) sync_file_range(r1, 0x3, 0x6, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) pwrite64(r2, &(0x7f00000000c0)="1e9cc27d2185f472b1909788cb9e613c81559837e2f602dbcdd1552fdf28e9a72fc9fc09529fa0aea6b006763f02740c41c33df7882ca8d1d7b968bfa1daa5cf521007080db7c5633cf0b070", 0x4c, 0x2) 02:37:46 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xd9) r0 = clone3(&(0x7f0000005880)={0x14f804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x20, 0x3, 0x63, 0x0, 0x6, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x100}, 0x4, 0xa0, 0x8, 0x7, 0x765, 0x0, 0x4d6f, 0x0, 0x400, 0x0, 0x6}, r0, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x3f, 0xc1, 0x1f, 0x0, 0x1, 0x21029, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb4a, 0x4, @perf_config_ext={0xcfb3, 0x8}, 0x4000, 0x8, 0x2eaff2f6, 0x7, 0x8, 0x7, 0x8, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r1, 0x0, r2, 0x9) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x40, 0x3, 0x40, 0x98, 0x0, 0x7, 0x26201, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffffffff71c4, 0x6}, 0x40, 0x4, 0x3, 0x3, 0x8000, 0x3, 0x55, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0x7, r2, 0x0) [ 605.100474] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 605.101599] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 605.106982] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 605.108115] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 605.109689] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0xec0, 0x0, {0x1}}, 0x14}}, 0x0) 02:37:46 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 605.219110] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 605.220475] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 605.222725] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 605.225477] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 605.227249] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:46 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:46 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 605.300698] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 605.302690] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 605.306229] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 605.307862] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 605.310584] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x7500, 0x0, {0x1}}, 0x14}}, 0x0) [ 613.811180] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 613.812673] Bluetooth: hci5: ACL packet for unknown connection handle 2745 02:37:55 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:55 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:37:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:37:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) sync_file_range(r1, 0x3, 0x6, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) pwrite64(r2, &(0x7f00000000c0)="1e9cc27d2185f472b1909788cb9e613c81559837e2f602dbcdd1552fdf28e9a72fc9fc09529fa0aea6b006763f02740c41c33df7882ca8d1d7b968bfa1daa5cf521007080db7c5633cf0b070", 0x4c, 0x2) 02:37:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x218, 0x0, @loopback}, 0x1c) 02:37:55 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:37:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 613.820438] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 613.821906] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 613.823407] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:37:55 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 613.917449] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 613.918743] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 613.920287] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 613.921466] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 613.922586] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x240, 0x0, @loopback}, 0x1c) 02:38:04 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:04 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xbea, 0x72a11de7, 0xfffffffffffffffc}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x9, 0xff, 0x4, 0x0, 0x9, 0x70028, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x20, 0x8}, 0x840, 0x2, 0x7fffffff, 0x1, 0x0, 0x20080, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xb, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 02:38:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000480), 0x10, r0) 02:38:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0xc00e, 0x0, {0x1}}, 0x14}}, 0x0) 02:38:04 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 623.343508] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 623.347469] Bluetooth: hci5: ACL packet for unknown connection handle 2745 02:38:04 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x241800, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = fork() pidfd_open(r3, 0x0) r4 = getgid() r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000100), 0x4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="ef8dd941c07e4c5c5f154c0286ed0f979b3391eb06f2799f72bab967d5", 0x1d}, {&(0x7f0000000240)="925301d17b66af979f4559244fc4b948c1889d4607d68dab214339324cf77f1ece591f54309980130dab38e42d728235677bdc30ef5ca3df3a5e60efc786d967368f503e46ac98ce85b1b706247e34623c9f1003dc824cc00590a2bb8c167309d92792ad498b2fc02409cc60fc29b78e58f232661e7b4075c071ab8cc0f111c7acb8f47da5dbafb475a84752f682856ccee8633e2b496d0010f675d940529531a1a3d518e11c875ac2906d7af045d8e258a3f849c8fa177d1a06e8585556746bfe782a6f6c15ec8ef621ccf4d1ffbccbe6658fe6b96f284e88ccae15e2", 0xdd}, {&(0x7f0000000340)="17fddf8f109b5b403d4916620d3a0cb6c7a7635ac905a91a1fb28eb6ea6122fc37026b0aabc056db38a467200100c0ee8e789b820fc91ffc9986beb90d640f56afa13526b06b7b424ae309c6004b", 0x4e}, {&(0x7f00000003c0)="2b56ec61179da8128d9a4d57e047645ebccfb4079b564e23e02052f83d242faf1ea1a40cd79aed504b31c3ddd81003bc29a179ef15fcb4a77dc0038a382577cc01a0fddf823a7a78f0e78c0f2ed804aac6c0a4254a5669a2c323cd284f85fa14b28b363720121fd5374d0aef3010fa0e4c64c92515b13f68cc1b168f", 0x7c}, {&(0x7f0000000440)="e84fde806ca32ca7630b856aa81e7ac1e4d4204c497c546cce98882cc88bd59a6f9e089b7e9fdc43a5d9d22d0ca54b6a4570a08b55bb791f220c2174a5dbe632b1313c3ca62cab938b59fef8d9fcf676ae99caec74d23c94fe991bbc5b569986c941308330e511fd1cabd74696fa68a38f4a3dbe7e618faf04f063b66428f0d79b1a1049afd97a94e5d638e20352697d93566d166bae73fcbe5e", 0x9a}], 0x5, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r6]}}], 0x60, 0x1}, 0x8000) sendfile(r1, r2, 0x0, 0xa0103) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="75ec9f673878bfb963619832ad669a2b31c4b0e64a9c66dfad896a64a5b59ec1c58cceff96865e5dfccd0de60328fe80efd4e22955541254ce80ed5482c6800bd6b392cf5aec0269eb387967e7772f61ceac0e04c228796b3138af4bb8ccdebfaf31ae4d1b6ece71bf2cdb282c03b2219b8e93e84c06d342b97a377020c1a5c29d3a8e74a27e7c66e7ea68d267bb24a1b546e804b7ad3baa53c20f1f0948f5fd2d2e34e9027b7c54ffb35a55507e824470357f2604a090710f32c75617e3b161523d6fa57a893bfc6e010af7d38355c58ff9bfe662193e5c1669"]) [ 623.356242] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 623.357599] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 623.359872] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:04 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf1, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0xf000, 0x0, {0x1}}, 0x14}}, 0x0) [ 623.446919] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 623.448192] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 623.451411] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 623.452592] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 623.455768] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000540)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000151160345eb90d98dd903e877e7628af1d0da91eb97bad817395a4e29b99f914f75d78138f3d1dcdcf5a2d312f6c2535e61e6748595b9eecad1f34e4dc1c3c784a592087e6f49854198065b5f232e4ae4c6c8652942c52814c9ddb3c7019b4d8c57c8a1db5510c72d828a4c161d01840ea3673e612c6a51bb99be98596e313d765a14679aa488a7772bc8100000000000000a8d4dfec77d7077b9bc1c21fdc51b38ca3aff4d0c560f366b7e55469097c18138c19d0621229887ad67a5a228d6731c48467c0aaf4c35a11fec64e88d980", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c18a182c", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fff, 0x31}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c001}, 0xc040) 02:38:04 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dc"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0103002fdf7ae8c8e89a22180300000000000000050000000c00"], 0x20}}, 0x40080c0) r3 = fork() r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x601b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000001940)=ANY=[@ANYBLOB="020000a6d60000000000000100040000007f956b433f520a085a94a6000000000800000022b34f9637ecdb2ad6c506ad58155543655019360f7a6c13d8114a6aa9f1597d7e3ebe67c214139287dbdc6e2abf84cf8b69eccb7f1c836d0000000000000000", @ANYRES32=r5, @ANYRES64=r2], 0x2c, 0x0) fchown(r4, 0x0, r5) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r6, 0x0, &(0x7f0000000100)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r7 = fork() ptrace(0x10, r7) ptrace$setregs(0xe, r3, 0x0, &(0x7f00000009c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/117, 0x75}, {&(0x7f00000006c0)=""/204, 0xcc}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f00000017c0)=""/222, 0xde}], 0x6, &(0x7f0000001ac0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000172000001000000", @ANYRES32, @ANYBLOB="e4bf7fc0da691e3d72cfb27bd4c9d74fc3a5ec2a1ac20e1db433c5e3132fa368f8f088d5c1274818c9d0d7be1d248eedbcae7b585e37b822a95e43a36136eebeb9724ca47d0f9f0966719c4edbc33be8633aacbbd5a308e7e3c98f69c06af5f0b874c69595e709d9d8bfb0232921fee18094", @ANYRES32, @ANYRES32], 0x98}}], 0x1, 0x10040, 0x0) ptrace(0x11, r8) r9 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x90002) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0/file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000019c0)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xfffffe36) [ 623.589179] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 623.592565] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 623.594887] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 623.596797] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 623.599605] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 623.622063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6593 comm=syz-executor.2 02:38:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:17 executing program 5: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) close_range(r2, r0, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000100)=""/184, 0xb8) 02:38:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x80000, 0x0, {0x1}}, 0x14}}, 0x0) 02:38:17 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dc"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x300, 0x0, @loopback}, 0x1c) 02:38:17 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:17 executing program 4: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x2430}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)=ANY=[@ANYBLOB="687567657d616c778479732c736d61636b6673666c6f6f723d7b232c00"]) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSTATu(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c65078f", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=0xee01], 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') [ 635.656884] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 635.658497] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 635.661504] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 635.662108] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 635.664407] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:17 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dc"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 635.751546] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 635.752572] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 635.756356] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 635.760647] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 635.761666] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:17 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 635.801052] tmpfs: Unknown parameter 'huge}alw„ys' 02:38:17 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa30000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0xf0ffff, 0x0, {0x1}}, 0x14}}, 0x0) [ 635.897075] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 635.897692] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 635.906245] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 635.906826] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 635.907898] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 635.917491] tmpfs: Unknown parameter 'huge}alw„ys' 02:38:17 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa30000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 636.019382] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 636.023122] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 636.053346] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 636.055088] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 636.057266] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:28 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3e8, 0x0, @loopback}, 0x1c) 02:38:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private2, 0x81}, 0x1c) 02:38:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x1000000, 0x0, {0x1}}, 0x14}}, 0x0) 02:38:28 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa30000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:28 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 647.311527] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 647.312742] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 647.316218] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 647.317426] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 647.319363] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:28 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30}, 0x68) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:28 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300000000000000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:28 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x120) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/211, 0xd3}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x4, 0x0, 0x3, 0x6}) 02:38:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x2000000, 0x0, {0x1}}, 0x14}}, 0x0) [ 647.503093] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 647.504583] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 647.511108] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 647.512935] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 647.527518] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:29 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300000000000000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 647.703246] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 647.705464] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 647.711515] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 647.713689] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 647.715988] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:29 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300000000000000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 647.797327] [ 647.797587] ===================================== [ 647.798159] WARNING: bad unlock balance detected! [ 647.798727] 6.19.0-rc5-next-20260113 #1 Not tainted [ 647.799322] ------------------------------------- [ 647.799890] syz-executor.6/6705 is trying to release lock (rcu_read_lock) at: [ 647.800760] [] __wait_on_freeing_inode+0x105/0x350 [ 647.801540] but there are no more locks to release! [ 647.802133] [ 647.802133] other info that might help us debug this: [ 647.802898] 4 locks held by syz-executor.6/6705: [ 647.803458] #0: ffff88800f4143f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 647.804520] #1: ffff88804a954698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 647.805707] #2: ffff88800f930950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 647.806772] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 647.807883] [ 647.807883] stack backtrace: [ 647.808424] CPU: 0 UID: 0 PID: 6705 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 647.808445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 647.808455] Call Trace: [ 647.808461] [ 647.808468] dump_stack_lvl+0xca/0x120 [ 647.808488] ? __wait_on_freeing_inode+0x105/0x350 [ 647.808510] print_unlock_imbalance_bug+0x118/0x130 [ 647.808532] ? __wait_on_freeing_inode+0x105/0x350 [ 647.808554] lock_release+0x1ee/0x270 [ 647.808578] __wait_on_freeing_inode+0x10a/0x350 [ 647.808600] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 647.808625] ? __pfx_var_wake_function+0x10/0x10 [ 647.808653] ? lock_is_held_type+0x9e/0x120 [ 647.808671] insert_inode_locked+0x25f/0x890 [ 647.808699] __ext4_new_inode+0x223d/0x4cd0 [ 647.808727] ? __pfx___ext4_new_inode+0x10/0x10 [ 647.808750] ? __pfx___dquot_initialize+0x10/0x10 [ 647.808778] ? __pfx_avc_has_perm+0x10/0x10 [ 647.808803] ext4_symlink+0x406/0xb40 [ 647.808834] ? __pfx_ext4_symlink+0x10/0x10 [ 647.808859] ? security_inode_permission+0x72/0xe0 [ 647.808880] vfs_symlink+0x44b/0x840 [ 647.808907] do_symlinkat+0x153/0x440 [ 647.808929] ? __pfx_do_symlinkat+0x10/0x10 [ 647.808949] ? strncpy_from_user+0x21b/0x2f0 [ 647.808978] __x64_sys_symlink+0x79/0xa0 [ 647.808999] do_syscall_64+0xbf/0x420 [ 647.809019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.809037] RIP: 0033:0x7f8ee2ea3427 [ 647.809050] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.809066] RSP: 002b:00007ffebd1de2c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 647.809082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ee2ea3427 [ 647.809093] RDX: 00007ffebd1de3a3 RSI: 00007f8ee2efe02f RDI: 00007ffebd1de390 [ 647.809103] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffebd1de160 [ 647.809114] R10: 00007ffebd1de017 R11: 0000000000000202 R12: 0000000000000001 [ 647.809124] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffebd1de390 [ 647.809142] [ 647.838851] ------------[ cut here ]------------ [ 647.858833] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/6705 [ 647.879736] Modules linked in: [ 647.881795] CPU: 0 UID: 0 PID: 6705 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 647.924109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 647.955479] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 647.964167] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 647.966251] RSP: 0018:ffff88805006f9a0 EFLAGS: 00010286 [ 647.966857] RAX: 00000000ffffffff RBX: ffff888016593700 RCX: ffffffff815664c7 [ 647.967723] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff888016593afc [ 647.968589] RBP: ffff888016593700 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 647.969442] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016593700 [ 647.970293] R13: 0000000000000001 R14: ffffffff85c0eb90 R15: ffff88804aa59fb0 [ 647.971153] FS: 0000555564b2f400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 647.972103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.974574] CR2: 00007f8ee2f23546 CR3: 0000000050df3000 CR4: 0000000000350ef0 [ 647.976906] Call Trace: [ 647.977311] [ 647.978223] __wait_on_freeing_inode+0x10f/0x350 [ 647.979180] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 647.980608] ? __pfx_var_wake_function+0x10/0x10 [ 647.982263] ? lock_is_held_type+0x9e/0x120 [ 647.983687] insert_inode_locked+0x25f/0x890 [ 647.985808] __ext4_new_inode+0x223d/0x4cd0 [ 647.989117] ? __pfx___ext4_new_inode+0x10/0x10 [ 647.990684] ? __pfx___dquot_initialize+0x10/0x10 [ 647.991706] ? __pfx_avc_has_perm+0x10/0x10 [ 647.993983] ext4_symlink+0x406/0xb40 [ 647.996866] ? __pfx_ext4_symlink+0x10/0x10 [ 647.998214] ? security_inode_permission+0x72/0xe0 [ 648.000327] vfs_symlink+0x44b/0x840 [ 648.001932] do_symlinkat+0x153/0x440 [ 648.003380] ? __pfx_do_symlinkat+0x10/0x10 [ 648.004357] ? strncpy_from_user+0x21b/0x2f0 [ 648.006736] __x64_sys_symlink+0x79/0xa0 [ 648.007695] do_syscall_64+0xbf/0x420 [ 648.008747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.009471] RIP: 0033:0x7f8ee2ea3427 [ 648.009955] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.011986] RSP: 002b:00007ffebd1de2c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 648.012859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ee2ea3427 [ 648.013699] RDX: 00007ffebd1de3a3 RSI: 00007f8ee2efe02f RDI: 00007ffebd1de390 [ 648.014518] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffebd1de160 [ 648.015336] R10: 00007ffebd1de017 R11: 0000000000000202 R12: 0000000000000001 [ 648.016141] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffebd1de390 [ 648.019481] [ 648.019740] irq event stamp: 437 [ 648.020155] hardirqs last enabled at (437): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 648.021289] hardirqs last disabled at (436): [] _raw_spin_lock_irqsave+0x53/0x60 [ 648.022393] softirqs last enabled at (432): [] kernel_fpu_end+0x59/0x70 [ 648.023412] softirqs last disabled at (430): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 648.024516] ---[ end trace 0000000000000000 ]--- 02:38:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="382b00000000000000000000000000000000007f00000100"/41, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006469676573745f6e756c6c00"/240], 0x138}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$team(&(0x7f00000026c0), r1) connect$netlink(r1, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x10800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2b, 0x5, 0x4f, 0x2, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x17, 0x5, 0x4}}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000019c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f0000002700)={0xe3c, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0xe18, 0x8, 0x0, 0x1, [{0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x127}, @WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x75f4, @empty, 0x6}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x401, @rand_addr=' \x01\x00', 0x6}}, @WGPEER_A_ALLOWEDIPS={0x15c, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffff001, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x655f}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1f}, 0xa6c00000}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x745, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf800}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x1}}]}]}]}, {0x5e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x80}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "47d439d8254e805a230360c98e5a1955102b31b4642b5eb5e37b5d2ca1b75f61"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xa58, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ac21d4764e3b9fb5fd7a5d7715602ffe7fa6470c8e5655b03383772c8930022"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfcb459b849127bffd8b3a51a0c27aaa7ad27385fb45d1f04d7e2b6da71e67f4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0xe3c}}, 0x20000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="4d30a7003978c497ee6a9b15ee6861df507cf3db4b0282ad466e9f589aba09f7023e4c7fb9e8e326c35d412e28dc8729fde145582ae75573e7559a682e9c31e702a99d691975f12da97b902651f015e2f38cda60d088577fc784aefc5b41f5299398bdf81cf8a9d57edc1993fa7ef335b40a0efcdbb7c693bb7eb844c307884bc7536d4d5d3e2e3c99ae294ac0ab30267a0c5d45009e6970b8ea03ec16f91a321b2cdd0dce3336f6eb7e39a61c9e4ede078c", 0xb2}], 0x1, &(0x7f0000000640)=[{0xa8, 0x115, 0x9, "0c1c5a913eb631fa13574f4e0bafb92bf5fbbd3acdd3c762ade18e63547a9eb7d7bc789122fdf77dcc80ac014f681e9f972030cf2f13a40ba41680a365584af5fc44654144311959ec619e281e510d5a78ddaadac2260cedcc9e4e1b4cea3c3d901e81a28b77c8080699a9bb6d79f7b92a383d81a6bd8722b4ffa2899238b246be5d76582015fe4dc204c2d0482ab0515b40dc"}, {0x50, 0x112, 0x80, "86075f730b6a21ed6940d64a17bbcee7a4a35058ebca3bd018688916a578acbab8ce010d08ffbd68b04be411a90b5284f6e778f6e060da10f650dd26c88ca0"}, {0x50, 0x29, 0x7, "010638bd038f2bef3c6d79b9a7c52d041313bbd06e088126f09521d16eb0e63a66988d08d39e116d45c4c3183614292c7c7df699ba57fa49e79e25"}, {0x38, 0x116, 0x9, "1e430cd06ad77b7dadf958bd7b1a341d8a23f44fe62b13c3471723958e1d640b876a35a6"}, {0x1010, 0x10a, 0x8000, "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"}, {0xc0, 0x1, 0x5, "5c9572f37b138f0dd20c7b913c34d483e55b237b53c1aacc3124eba3d9c47d10ae6e4d52e73d6f691b08ac8d5b6048d9c383c528d4db75a9dedb9d1cd5810856cfbefc3d76b146059c2f52bf503916cec0381bf7274b2f8e2854bc1ca82255621b66fba9a1068162dcdc1f6862fbe979a93b48335bc53490cec579cb8cad0ed88d5798d23cb55fa8acc9b800ecc73a92b204a98801a6ef87be47af0c9011daae3afa5781dd089b8218"}, {0xc8, 0x116, 0xffffff80, "5fbea02fb43d2d81e1f750ca38c6fafacd26c4f057f551fc27cf1a1c9bd5244f16f2aa83c903e4ef6f41a63be9855cc003ee4c6627d905b5c827c7cafac78df25685858bdc4337216421e4310ae5b0633eff0eb88466292da5adaf97d4107c1b8596f9920e2c975dc5b697eebe664d6a97cbb5a3760ecdaa8ca10f98c1028748faa9de2c6585f873cb7f1a0551a1a3500b0437a36185e847069129851c158afa8e53f89a4ef569ff3cb0d38435a72547fe5dbf6c8c66"}], 0x1318}, 0x0, 0x20004081}, 0x6f) 02:38:29 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 648.080510] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 648.082189] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 648.090644] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 648.094283] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 648.095547] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 648.114544] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 648.115346] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 648.115889] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 648.117479] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 648.118149] blk_print_req_error: 7 callbacks suppressed [ 648.118158] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 648.119509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.119958] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.120691] buffer_io_error: 6 callbacks suppressed [ 648.120699] Buffer I/O error on dev sr0, logical block 0, async page read [ 648.121756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.122226] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.122938] Buffer I/O error on dev sr0, logical block 1, async page read [ 648.125103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.125554] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.126801] Buffer I/O error on dev sr0, logical block 2, async page read [ 648.128363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.128816] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.130649] Buffer I/O error on dev sr0, logical block 3, async page read [ 648.131273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.131729] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.134078] Buffer I/O error on dev sr0, logical block 4, async page read [ 648.135641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.137380] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.138720] Buffer I/O error on dev sr0, logical block 5, async page read [ 648.139886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.140763] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.142476] Buffer I/O error on dev sr0, logical block 6, async page read [ 648.143634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.144765] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.146083] Buffer I/O error on dev sr0, logical block 7, async page read [ 648.147317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.148402] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.149749] Buffer I/O error on dev sr0, logical block 0, async page read [ 648.150897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.151778] Buffer I/O error on dev sr0, logical block 1, async page read [ 648.152928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.154079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.154965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.155940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.156883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.157890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.159869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.160846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.161821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.173778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.174773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.175766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.176812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.181909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.185436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.186887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.187934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.188978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.190071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.191132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.192160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.193215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.194312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.195360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.196403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.197443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.198474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.199505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.200548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.201582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.216773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.226808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.227926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.229145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.230161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.231314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.232493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.233648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.234865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.236148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.237298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.238574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.239741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.240897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.242173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.243225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.244438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.245587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.246807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.247972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.249211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.250405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.251561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.252726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.253880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.255121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.257109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.258231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.259231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.260390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.261499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.262602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.263709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.264839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.267196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 648.283393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 02:38:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x3000000, 0x0, {0x1}}, 0x14}}, 0x0) 02:38:38 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x7d}, 0x80}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xaa}, "ed1e773922a60c9c03420985f2176dffd05e4a1d30f1c73ee7415710508f04530c91b41acd487a6ad8fe7ec332325fd755f8c0cbb7c8bc5547e430458f69707ad7fd56c31d8a52b83fcccdca0cc96872f968304fc0b3bf4e3531813e812452d79660c2d4a608adf5e3dd692175cf6c2a8e0944b63ded93a46840ffe309ea7c0aaf47a0dc80936e8bc8fe03d5c644fcd092625dcca2fba2b408d405eb6c484f9c3ad8b1a09f46a2dba20a"}, 0xae) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x28}, "7edcf36f09c2836dca2d4d97803dd1ef8086a46b09ea8e61f15998346104cde4c664d4bc74813f4f"}, 0x2c) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) 02:38:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x500, 0x0, @loopback}, 0x1c) 02:38:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) close(0xffffffffffffffff) execveat(r0, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x400) 02:38:38 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 02:38:38 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa3000000000000000000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:38 executing program 4: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) perf_event_open(0x0, 0x0, 0x1fffd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x81, 0xff, 0x81, 0x1f, 0x0, 0x7, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x88, 0x59}, 0xa014, 0x9, 0x10000, 0x4, 0x5, 0x8001, 0x7ff, 0x0, 0x100000, 0x0, 0x401}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/119, 0x10) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000200)='./file1\x00') 02:38:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 657.389146] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 657.389901] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 657.391692] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.392354] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.395702] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf100, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:38 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa3000000000000000000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 657.435980] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 657.436796] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 657.441489] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.442179] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.443237] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 657.457082] Bluetooth: hci7: unexpected event for opcode 0x202d 02:38:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:38 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa3000000000000000000"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) [ 657.465969] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 657.474767] Bluetooth: hci7: unexpected event for opcode 0x202d 02:38:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b353000000000000000019000000010001800800010079121f6302942571a43dea250ae2", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) [ 657.475894] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 657.536846] cgroup: fork rejected by pids controller in /syz4 [ 657.542157] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 657.542766] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 657.548175] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.548782] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.564742] Bluetooth: hci5: ACL packet for unknown connection handle 201 02:38:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 02:38:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x280, 0x0) 02:38:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x9000000, 0x0, {0x1}}, 0x14}}, 0x0) [ 657.636252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:38:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x201, 0x75000000, 0x0, {0x1}}, 0x14}}, 0x0) 02:38:39 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x0, 0x2, 0x8d}}]}}, 0x12) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000504040100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/156], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x5}}}}, 0xf) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x1, 0xc8, "0cc662b0b5a57454"}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 02:38:39 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540)="0774ab99a7f0704a81e3ec6073780760c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x30, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db4d31d6805ecdac8714c169d9d9f801c1c7b3b6862bae48eb0b0033", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1, 0x0, 0x55}}], 0x3, 0x46fd6459f5df0568) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) [ 657.728639] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 657.729488] Bluetooth: hci5: ACL packet for unknown connection handle 2745 [ 657.731324] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.732271] Bluetooth: hci5: ISO packet for unknown connection handle 1106 [ 657.733486] Bluetooth: hci5: ACL packet for unknown connection handle 201 VM DIAGNOSIS: 02:38:29 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82977eb0 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88806ce08940 R8 =0000000000000001 R9 =ffffed100d9c1119 R10=0000000000000000 R11=000000005f203f20 R12=0000000000000034 R13=ffffffff889c1a10 R14=ffffffff889c19c0 R15=ffffffff889c1c80 RIP=ffffffff82977f05 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555564b2f400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8ee2f23546 CR3=0000000050df3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a107af8 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003420f64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a107b50 RIP=ffffffff81b3f806 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555570905400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe3785dff8 CR3=000000000e5a9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000