3823732c42c8bcd7b94adaf1503177d4b81cdc3a29d8f6d22daee1dafa0cdee7bdba06d05f3b5de2daa228656c72170c3aa1928e0970ae6fe121c54c31418008dc0a30821de5d37b3eebef42e20e046aec69cf04", 0x5f, 0x7}]) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x200, r9, 0x0, 0x0, 0x338}]) 05:51:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000200), 0x10a1422, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}]}) 05:51:07 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x7f}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="62736467728675099a3cedff4bdcbe0a46b4efd23f547d325465f3db808c0f1b995bb5c9e93802a9dd34"]) 05:51:07 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x8c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0c4) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 05:51:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a000100774516dcd4dc"], 0x20}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x101880, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10e}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x48, 0x0, &(0x7f00000018c0)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x62e, 0x7, 0x3f74, 0x20, 0x5}, 0x14) fcntl$setstatus(r2, 0x4, 0x40400) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@loopback, @loopback, @private0, 0x8, 0x0, 0x1, 0x400, 0xfffffffffffffffb, 0x4001000a}) [ 153.912398] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.927318] ext4: Unknown parameter 'bsdgr†u š<íÿKܾ [ 153.927318] F´ïÒ?T}2TeóÛ€Œ™[µÉé8©Ý4' [ 153.927782] loop2: detected capacity change from 0 to 131072 [ 153.960356] ext4: Unknown parameter 'bsdgr†u š<íÿKܾ [ 153.960356] F´ïÒ?T}2TeóÛ€Œ™[µÉé8©Ý4' [ 153.975570] loop2: detected capacity change from 0 to 131072 05:51:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xa) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) bind$bt_l2cap(r0, 0x0, 0x0) 05:51:07 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00') 05:51:08 executing program 0: rmdir(&(0x7f0000000000)='./file0\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='%\\#!+\x00', &(0x7f00000000c0)='./file0\x00', r2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x8008b705, 0xfffffffffffffffd) 05:51:08 executing program 7: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x41a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() 05:51:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x40, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x88d0}, 0x40000) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4051) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:08 executing program 6: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_setup(0x1f, &(0x7f0000000040)=0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r3 = eventfd2(0x8, 0x80801) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) io_submit(r2, 0x9, &(0x7f0000000a00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)="8de19ca7bba1dea281bcbd23bd42fb2ed0d968bd67ffa0519a4399f8dfe829c55be6b59d10f4fa63ab7d3439dc78c1c59a", 0x31, 0x17f6def8, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f00000001c0)="487a7b8902", 0x5, 0x7fff, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x20, r0, &(0x7f0000000280)="16c1a0257aca9fecaee7af98f352147e93e043cc9aba04abad2c19fc16bf21bee622e92a1646c31bf265425862b5f7d0815efc0fdcb68acf629dba4354a92facafd585e0a3fa1c9f1c6bfb838fb7bf3314b7d92227104612d61cf13756b71747e2ae7173b43ad2af6abfbed6eb2681800dd8f2bb41661cd43393d59b29f1201b32c69e832c57b9e9803c750fa7a81fddc7444ecf63c70afdb69b1a9a94ae0359356bcaccf7a1f44ffc6e505cbf5d790d2cfc1bb33a83af71b65c0611fabef9fe61e10aa4b3ac206bbb3ca3a44740cb874b", 0xd1, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000003c0)="6f39c85277e104d8ef453f03ceb4cb3f838b1c0fc02585af59e627799ac82f5df9c353c5d04d3ad95636f998b9f87b251537d03dfa6151a7c725fea16fd59cc10a9c52e4542d6a4b3a3238811e8057e9c3dcba0a7c3b651c183bc76f2cf41eb289ef012ba0a9b7cb2f055ab70aa818f4abdeeff89e348f6ebd7ed834c4833ff54dab24cbe3658cc4648298b4de99149e2067e597819807f26c36d5f0bd009c9f7a2583ad49102bf17b3cd1a5a65bb2c301a4a3e31a7d13d9c53318fb41d3d235e817cd2fd2c51b00", 0xc8, 0x5, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x92e1, 0xffffffffffffffff, &(0x7f0000000500)="ac2c16ec3461440260b95860beb2d8568c1e33c92b0a81d8707b1b9be93777379d35ecc463b1401b4d15ea768e4eb1ffae7036675f35eb91f3f0d8943efa264762a049ba5d3728038c15f30bc854e24ebfaa8cfb3dc990f5fc573b35e994931e48cfbe0b6e5f0dbc912c8c7a498b454aa707a89bcae0998a45f774e0a248259714d6e08e2fa4bbbcbe39f988bf910af1ef8151c6e7f2f2704fb3410683b8c7c6fd574f0ec2b020af30554f85b225cf6f335c9e4af5eff09dc95ca9436d388731258fae6c407c3f8e960ee8b5d4bfdb315f07f82422294065120e23446dc4a79d8a7bf16414ca", 0xe6, 0x1, 0x0, 0x1, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x8000, r8, &(0x7f0000000640)="1d06b670b8c3e132b9eac71bc04a0a10f9d92fa8661bb281e4f30f106c9bc59aff4f3d82ae1d7a77ffd7003795d1af0c090f040e9b5920276e16feb689a302ffcc99b97d0d3b0da225e96a0bcd60312e36d1365e91b18ba8ee4996891d8a3397441900c660dbc8dfc781a35d8b448c8d45cf9b5e6f508e750efe1faa1af392c50f6fb4421b04710689fd0390935cafc8fc1082c39410f155db5751c620d06a7f0e73bb3428b513383954f3eaf71e9ca617919e6fe8bb5386b16140f3954d7534846b0c409460bfbf0bdde4b8d5", 0xcd, 0x1, 0x0, 0x2, r5}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x1000, r6, &(0x7f0000000780), 0x0, 0x7ff, 0x0, 0x2, r7}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000000840)="e8f94d4a1efda0ac8aa74abf52d9ac544e7a7aa5063a05c168ae62b847078317c83ba92df406e1940b98f971dafebfcbc07f3dddda4a08ef1b90800138636ddea033dc7fafab81903ec340a00d3e67987aa79d673c34a2301cd499146f6e39fdb5354fc624148eddc2b8a83caee2abb58536320de4ad125fbda2a458732f20110701a64839947f55f6e8cb3d8038f1166977943fd4cc3ef88a22749218d57c19b1682a7c9b442d5206927164533b388e717ebf8b3c3942c2", 0xb8, 0x800, 0x0, 0x0, r8}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x80, r9, &(0x7f0000000940)="b5b2f74a067ccf639687ae3823732c42c8bcd7b94adaf1503177d4b81cdc3a29d8f6d22daee1dafa0cdee7bdba06d05f3b5de2daa228656c72170c3aa1928e0970ae6fe121c54c31418008dc0a30821de5d37b3eebef42e20e046aec69cf04", 0x5f, 0x7}]) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x200, r9, 0x0, 0x0, 0x338}]) 05:51:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r2) io_uring_setup(0x2764, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r4 = getpid() getpriority(0x0, r4) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000440)=""/14, 0xe}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000a9158488000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90}, 0x10020) clone3(&(0x7f0000000700)={0x108000000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180), {0x1a}, &(0x7f00000001c0)=""/250, 0xfa, &(0x7f00000002c0)=""/211, &(0x7f0000000400)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x4, {r5}}, 0x58) 05:51:08 executing program 0: syz_mount_image$ext4(&(0x7f0000001280)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x10400, &(0x7f0000000040)={[{@usrquota}]}) [ 154.463858] No source specified [ 154.469951] No source specified 05:51:19 executing program 6: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)=0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000b71e00010000000000000000000000000000000000100000020010c5d5eb18e482f790e5be90d239c326c038b1dec173b0bd10b5ffe0a1d27c4532af127eb6ddf73ff80584db84927a6c57c13c97f117a6a12229ba85463f33c0c02834a402103efb1652b6975a7c07ef9ee42a8a97ded16e5efea14a883f5827f4813fff9986637fed3e756907c62d10d9073742884d1b46efa31252e626d9923512a664e2fbd51e13f76ea743223fdc8a4f54b944ece07e57ca841bfd661dc62aeb3c97c53c26b76bd050e45c76b6428c12f34ee0209421b403a071cbc4247da5708f307e"], 0xb8}}, 0x0) r2 = eventfd2(0x8, 0x80801) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) io_submit(r1, 0x9, &(0x7f0000000a00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)="8de19ca7bba1dea281bcbd23bd42fb2ed0d968bd67ffa0519a4399f8dfe829c55be6b59d10f4fa63ab7d3439dc78c1c59a", 0x31, 0x17f6def8, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f00000001c0)="487a7b8902", 0x5, 0x7fff, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x20, r0, &(0x7f0000000280)="16c1a0257aca9fecaee7af98f352147e93e043cc9aba04abad2c19fc16bf21bee622e92a1646c31bf265425862b5f7d0815efc0fdcb68acf629dba4354a92facafd585e0a3fa1c9f1c6bfb838fb7bf3314b7d92227104612d61cf13756b71747e2ae7173b43ad2af6abfbed6eb2681800dd8f2bb41661cd43393d59b29f1201b32c69e832c57b9e9803c750fa7a81fddc7444ecf63c70afdb69b1a9a94ae0359356bcaccf7a1f44ffc6e505cbf5d790d2cfc1bb33a83af71b65c0611fabef9fe61e10aa4b3ac206bbb3ca3a44740cb874b", 0xd1, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000003c0)="6f39c85277e104d8ef453f03ceb4cb3f838b1c0fc02585af59e627799ac82f5df9c353c5d04d3ad95636f998b9f87b251537d03dfa6151a7c725fea16fd59cc10a9c52e4542d6a4b3a3238811e8057e9c3dcba0a7c3b651c183bc76f2cf41eb289ef012ba0a9b7cb2f055ab70aa818f4abdeeff89e348f6ebd7ed834c4833ff54dab24cbe3658cc4648298b4de99149e2067e597819807f26c36d5f0bd009c9f7a2583ad49102bf17b3cd1a5a65bb2c301a4a3e31a7d13d9c53318fb41d3d235e817cd2fd2c51b00", 0xc8, 0x5, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x92e1, 0xffffffffffffffff, &(0x7f0000000500)="ac2c16ec3461440260b95860beb2d8568c1e33c92b0a81d8707b1b9be93777379d35ecc463b1401b4d15ea768e4eb1ffae7036675f35eb91f3f0d8943efa264762a049ba5d3728038c15f30bc854e24ebfaa8cfb3dc990f5fc573b35e994931e48cfbe0b6e5f0dbc912c8c7a498b454aa707a89bcae0998a45f774e0a248259714d6e08e2fa4bbbcbe39f988bf910af1ef8151c6e7f2f2704fb3410683b8c7c6fd574f0ec2b020af30554f85b225cf6f335c9e4af5eff09dc95ca9436d388731258fae6c407c3f8e960ee8b5d4bfdb315f07f82422294065120e23446dc4a79d8a7bf16414ca", 0xe6, 0x1, 0x0, 0x1, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x8000, r7, &(0x7f0000000640)="1d06b670b8c3e132b9eac71bc04a0a10f9d92fa8661bb281e4f30f106c9bc59aff4f3d82ae1d7a77ffd7003795d1af0c090f040e9b5920276e16feb689a302ffcc99b97d0d3b0da225e96a0bcd60312e36d1365e91b18ba8ee4996891d8a3397441900c660dbc8dfc781a35d8b448c8d45cf9b5e6f508e750efe1faa1af392c50f6fb4421b04710689fd0390935cafc8fc1082c39410f155db5751c620d06a7f0e73bb3428b513383954f3eaf71e9ca617919e6fe8bb5386b16140f3954d7534846b0c409460bfbf0bdde4b8d5", 0xcd, 0x1, 0x0, 0x2, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x1000, r5, &(0x7f0000000780), 0x0, 0x7ff, 0x0, 0x2, r6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000000840)="e8f94d4a1efda0ac8aa74abf52d9ac544e7a7aa5063a05c168ae62b847078317c83ba92df406e1940b98f971dafebfcbc07f3dddda4a08ef1b90800138636ddea033dc7fafab81903ec340a00d3e67987aa79d673c34a2301cd499146f6e39fdb5354fc624148eddc2b8a83caee2abb58536320de4ad125fbda2a458732f20110701a64839947f55f6e8cb3d8038f1166977943fd4cc3ef88a22749218d57c19b1682a7c9b442d5206927164533b388e717ebf8b3c3942c2", 0xb8, 0x800, 0x0, 0x0, r7}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x80, r8, &(0x7f0000000940)="b5b2f74a067ccf639687ae3823732c42c8bcd7b94adaf1503177d4b81cdc3a29d8f6d22daee1dafa0cdee7bdba06d05f3b5de2daa228656c72170c3aa1928e0970ae6fe121c54c31418008dc0a30821de5d37b3eebef42e20e046aec69cf04", 0x5f, 0x7}]) 05:51:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000013500)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x202403, 0x10) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x4) clone3(&(0x7f00000002c0)={0x1f08cc180, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syncfs(0xffffffffffffffff) 05:51:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000002c0)="84d1ec82bd8f9cc2d850be7c57ea607b125a5ef81920d296c0537811053da00d86b057d1b87aa6e04fdbec5e3cb7fb80d68950c32e9f22a2b177bcf7dd8ba53c9bfa0e208a4d686688964057765f3ec7aa0fb86b88923df025ee018a84d793a77783a332a84ba768a6ae17c3e8465d02f472d1b5e37a8baa77166cda84bf13799d90653d787a4b4243925420dd85e0a2242a77c9bc6f9bb45150bd192968b01965ddda6751b6f50aa7889fa502a4958235ab5016ad52dd9a7f085ad36d989c67e34048a09f6d8f775dc0631776b288a3d3bd19d43dcfd68b896d541041fa706a1fb022f7d709457b2ee38e78a5c5") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'wg1\x00', @ifru_hwaddr=@remote}}) 05:51:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) clock_gettime(0x0, &(0x7f0000000cc0)) recvmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/236, 0xec}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x60, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0xfffffffffffffeff, 0x206e80) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 05:51:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x40, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x88d0}, 0x40000) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4051) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xf8, 0x1, 0x60, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x8000, 0x5, 0x9, 0x7, 0xfffffffffffffff7, 0x6217, 0x0, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) close_range(r1, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r3, &(0x7f0000000080)=""/203, 0xcb, 0x10000000000000) 05:51:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x501, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 05:51:19 executing program 1: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000280)=@ng={0x4, 0x3, "de5f94997d4994709fe12c3653c1e4"}, 0x11, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001d80)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f00000001c0)="ee5d77983108", 0x0, 0x5, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x405, 0x0, 0x0, 0x880c02, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200), 0x400) llistxattr(&(0x7f00000002c0)='./file0/../file0/file0\x00', &(0x7f00000003c0)=""/134, 0x86) [ 165.598235] loop2: detected capacity change from 0 to 240 05:51:19 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x81, 0x0) lseek(r0, 0x4, 0x3) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='+', 0x1}], 0x1, 0x0, 0x0, 0x0) 05:51:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r0, 0x0, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0x1000000000}) unlink(&(0x7f00000000c0)='./file0\x00') sendfile(r1, r2, 0x0, 0xa0103) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) 05:51:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x40, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x88d0}, 0x40000) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4051) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x40505412) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x0, 0x102) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x0, 0x2, 0x20, 0x0, 0xe}) 05:51:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d4305", 0xe}], 0x1}}, {{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'essiv(pcrypt(authencesn(cmac(xeta-generic),cts-cbc-aes-aesni)),s'}, 0x80, 0x0}}], 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) 05:51:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]) 05:51:19 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000b71e00010000000000000000000000000000000000100000020010c5d5eb18e482f790e5be90d239c326c038b1dec173b0bd10b5ffe0a1d27c4532af127eb6ddf73ff80584db84927a6c57c13c97f117a6a12229ba85463f33c0c02834a402103efb1652b6975a7c07ef9ee42a8a97ded16e5efea14a883f5827f4813fff9986637fed3e756907c62d10d9073742884d1b46efa31252e626d9923512a664e2fbd51e13f76ea743223fdc8a4f54b944ece07e57ca841bfd661dc62aeb3c97c53c26b76bd050e45c76b6428c12f34ee0209421b403a071cbc4247da5708f307e"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:51:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b000000800000000800000052", 0x61, 0x400}, {&(0x7f0000010100)="0000000000000000000000003b68aaada5ab8e010000000c00000000000000ddf4655f0000000010", 0x28, 0x4e0}], 0x0, &(0x7f0000013800)=ANY=[@ANYBLOB=' ']) syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x80, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)="5548f810cd0f93fc6123f80206fcf2f562461b2aea9f637ec9a4af9489511be80b1071f40bccff351fadb2d146f37c9b948626fbdc9a5c655aa01507f343876f6138107320e7fa12b40721038e8e1fb1069c1e234302d4ed30923b0734f108aa8e7b2147c28fd4693a63e0d05be6daba4ebfd62d72cc1be4bc5fc9d95dcd1ce63d2a7f6489d1bbafa22a5233ab43712a8cafdcb626d35abbd569d0816aa037fbefbc0ee3922488a0ff8ddeaba2d75996ae35f5a4b53734642fbf17bb9a9bd1e6c4cb45778086159a", 0xc8, 0x1}, {&(0x7f00000001c0)="82fe08caf7a0508bb68e72b29b16cd779dee5980aff7c35200", 0x19, 0x2}], 0x880, &(0x7f0000000380)={[{}, {'btrfs.'}, {']'}], [{@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x34, 0x64, 0x33, 0x61, 0x32, 0x66, 0x62], 0x2d, [0x34, 0x33, 0x35, 0x32], 0x2d, [0x38, 0x30, 0x5a, 0x62], 0x2d, [0x33, 0x36, 0x0, 0x66], 0x2d, [0x32, 0x32, 0x33, 0x66, 0x31, 0x30, 0x33, 0x38]}}}, {@dont_hash}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', 'ext4\x00'}, &(0x7f00000000c0)='ext4\x00', 0x5, 0x0) [ 166.003046] loop7: detected capacity change from 0 to 512 [ 166.030180] ext4: Unknown parameter ' ' [ 166.043928] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 05:51:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f084796d75330a9e08ea4cf024a7794208c04ea2dd4d637603e0e925d85d99703eebeb05535d7c17d4b3aae9f9633fdf14133d34a35d645ea587e8a940b53d966623a9eaca47a16eb791de5fcc41c22dbc1315e84f151a560b42b83ba96ca1de5c", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="77fc3b82333e06f8245bb2268aff0101"], 0x1c}}, 0x0) [ 166.067327] loop7: detected capacity change from 0 to 512 [ 166.073264] ext4: Unknown parameter ' ' 05:51:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x40, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x88d0}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:20 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) poll(&(0x7f00000006c0)=[{r6, 0x48}], 0x1, 0x1) 05:51:20 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x310, 0x70bd2d, 0x8, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="0500"/24], 0x18}}], 0x1, 0x400c000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) writev(r1, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 05:51:20 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x21}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x66, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x0, 0x4, @device_b, 0x2, @device_b, 0x1, 0x9, @broadcast, 0x7fff}}, @ibss={0x6, 0x2, 0x1f}, @tim={0x5, 0x35, {0x2, 0x97, 0x1f, "3f655790869a3ba29952d81d60e97e143f734c04fa081b41f318b4b6a4d9e0a97739bb857374fb1f4c6229007eef1a6664c2"}}]}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc001}, 0x14004000) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x5, 0x0, 0x7}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 166.243026] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 05:51:20 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) pread64(r2, &(0x7f0000000040)=""/233, 0xe9, 0x10000) 05:51:20 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000b71e00010000000000000000000000000000000000100000020010c5d5eb18e482f790e5be90d239c326c038b1dec173b0bd10b5ffe0a1d27c4532af127eb6ddf73ff80584db84927a6c57c13c97f117a6a12229ba85463f33c0c02834a402103efb1652b6975a7c07ef9ee42a8a97ded16e5efea14a883f5827f4813fff9986637fed3e756907c62d10d9073742884d1b46efa31252e626d9923512a664e2fbd51e13f76ea743223fdc8a4f54b944ece07e57ca841bfd661dc62aeb3c97c53c26b76bd050e45c76b6428c12f34ee0209421b403a071cbc4247da5708f307e"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:51:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x40, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000292fe711f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000ace670325132510000e67032510300000000002e2e2020202020202020201000ace670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000ace670325132510000e670325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f0000010d00)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) getdents(r0, &(0x7f00000002c0)=""/204, 0xcc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000003c0)={{0x0, 0x6, 0x9, 0x5, 0x1, 0x7, 0x8001, 0x24, 0x6, 0x9, 0x6, 0x5, 0x8, 0x8, 0x80000001}}) [ 166.686529] loop0: detected capacity change from 0 to 128 05:51:29 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) poll(&(0x7f00000006c0)=[{r6, 0x48}], 0x1, 0x1) 05:51:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendfile(r1, r2, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 05:51:29 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x181001, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="4000b8b0000000"]) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/211, 0xd3}], 0x1, 0x2, 0x4) 05:51:29 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) pread64(r2, &(0x7f0000000040)=""/233, 0xe9, 0x10000) 05:51:29 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:51:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, 0x0, 0x0, 0x4) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r2, 0x0) r3 = fork() ptrace(0x10, r3) ptrace(0xd, r3) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0xac, 0x8, 0xc2}, {0x800, 0x0, 0xa, 0x80000}, {0xffe1, 0x7, 0x80, 0x7}]}) r5 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x5, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x52) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) ptrace$setregs(0xf, r3, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a4d1f9c") fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x6100}, 0x91cd034e4809f27}, 0x0) 05:51:29 executing program 0: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:51:29 executing program 1: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/187, 0xbb, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000400)) syz_emit_vhci(&(0x7f00000010c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000002100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000002200)) syz_emit_vhci(&(0x7f0000002240)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x5, 0xc8, 0x8, 0x6, 0x7ff}}}, 0xb) syz_emit_vhci(&(0x7f0000002280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x11c}, @l2cap_cid_signaling={{0x118}, [@l2cap_move_chan_req={{0xe, 0x7f, 0x3}, {0x4, 0x1f}}, @l2cap_disconn_rsp={{0x7, 0xfa, 0x4}, {0x101, 0x1}}, @l2cap_info_rsp={{0xb, 0x99, 0xf3}, {0xbe, 0x2, "f5f86b8944893c3406ae56ec751992252b9f87b4f3b84a7c0805d31366237364ac92ea3ae44f5fae895574e278ea25503d1afe192fa15faffafb91c1f5453c71550e91c4a0ebb0d323349b5ec9a740a8050e670d10f0b1587b2e978d659dcc32614d66339ba682527f0db79ae9b7d7bf70b334c0c3c526e05fd24761776ac5d40664c15066d2807e49998ce5879681a9ad9726b4257b59765a61951c1eb63c0349cb9507a818dc5e87abd74cb3c48340047ce50c3c6555e19a2a7300ef6cffa3799d5bfce5da527ef919922e1e9b285d6fb4d859980c083099919be0118ca410602785d4f2a69d3705819512ea0b13"}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x100}}, @l2cap_conf_req={{0x4, 0x3f, 0x8}, {0x2, 0x10, [@l2cap_conf_mtu={0x1, 0x2, 0x9c63}]}}]}}, 0x121) syz_emit_vhci(&(0x7f00000023c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x80, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000002400)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "ae7617ed60734aa6a0b6aadaae108bb86c10de43266b1f972e19ed5f519a26d6d40875bfabbec87d6c7f33233f99b7f685c0ff387e719b212c72fda8c0fde8d1f980513cf8a80c015a7d9d6fc47c16164edd641dd86c"}, 0x5a) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000002480)) syz_emit_vhci(&(0x7f00000026c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc9, 0x20}, {0xc8, 0x66}, {0xc8}]}}}, 0x10) syz_emit_vhci(&(0x7f0000002140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x80, 0x12}, {0x8, 0x1f, 0x2, 0x1, [0x2, 0x5, 0x7, 0x800, 0x4]}}}}, 0x1f) [ 176.068478] random: crng reseeded on system resumption [ 176.084571] Bluetooth: hci3: hcon 00000000dbb20240 sent 1 < count 32 [ 176.085342] Bluetooth: hci3: hcon 00000000a83159eb sent 1 < count 102 [ 176.094048] random: crng reseeded on system resumption [ 176.101818] Bluetooth: hci3: hcon 00000000dbb20240 sent 0 < count 32 [ 176.102436] Bluetooth: hci3: hcon 00000000a83159eb sent 0 < count 102 05:51:30 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) pread64(r2, &(0x7f0000000040)=""/233, 0xe9, 0x10000) 05:51:30 executing program 1: r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './cgroup.net/devices.allow\x00'}) openat(r3, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x10880, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 05:51:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32353936313432303000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000457900aa5f634b37b3eeb32debc4d834010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="2000000024b304b624b304b600000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005c7bc8b50000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000477b71930000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3235393631343230302f66696c65302f66696c653000000000000000000000000000000000000000000000517c97ec0000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000733234d20000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="65763a4a2871bb681249f3b1055cb14dc60d9e22699b05950fab3912ad5f61dd5b6d752c7d7ada1e0762a68532046bd118fc705a5432c8634141e10118017e6f31c6658f444df4ee52efacb7d5612aa3a7c08983afdf03207aad9d8a121d8c09c1ec444cead465df0f0dee281cd7792e0c48bb9dd807202735722860bb67e224c00c7a796e3c4e149c3264ad19998e66e907fab2c80b8c7d19c2429c865bad053eb52ba862b2b6d67e7a9ac0c27122615a", 0xb1, 0x5}], 0x240400, &(0x7f00000005c0)={[{'ext4\x00'}, {'ext4\x00'}, {'ext4\x00'}, {'{'}], [{@fsuuid={'fsuuid', 0x3d, {[0xa, 0x36, 0x30, 0x56, 0x54, 0x66, 0x38, 0x33], 0x2d, [0x61, 0x33, 0x62, 0x55], 0x2d, [0x66, 0x65], 0x2d, [0x5a, 0x66, 0x39, 0x64], 0x2d, [0x39, 0x31, 0x33, 0x32, 0x64, 0x60, 0x30, 0x61]}}}, {@measure}, {@euid_gt}]}) mkdirat(r0, &(0x7f0000000640)='./file0\x00', 0x0) [ 176.270590] loop7: detected capacity change from 0 to 4096 [ 176.296699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 05:51:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:30 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 05:51:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2800400, &(0x7f0000000200)=ANY=[@ANYBLOB="724473630ea553", @ANYRESHEX, @ANYBLOB="2c000310b2a44afcb37b74f2b591038129bf96066c43bb36e6aaf88709d28f4da02200d0ceb078b5139c48abbd95cbd5e330a8e098b86b44ac2cf9b53b1f2d0bb94a36d7f9c32e3da0165e53bb6432e1453879ae0a54e8d0c4a675e004c0b90442901145d19b654e36adc372b308235cce9914fef63908b2a5f621f7ea52addab1e8b62c1891a09f13ceced0b4af5d"]) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x12, "130609142250b259e7e85b1f5de4d9"}, 0x11, 0x2) 05:51:30 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) pread64(r2, &(0x7f0000000040)=""/233, 0xe9, 0x10000) [ 176.365502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.383865] ext3: Unknown parameter 'rDsc¥S0xffffffffffffffff' [ 176.398787] ext3: Unknown parameter 'rDsc¥S0xffffffffffffffff' 05:51:39 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) 05:51:39 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) poll(&(0x7f00000006c0)=[{r6, 0x48}], 0x1, 0x1) 05:51:39 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @none={0x0, 0x3}}, 0x14) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @long={0x3, 0x2}}, 0x14) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="180ba7eb9c3237e3c7e5686aa7225dac3b608cc126d5664070080dd1cc65928d286fae54bf6fbbb0e50321d045eed7307bfb1b528066e15e11625f81cd03af98d22a1376a4b61bfb39aeadf8ab0d09423fd698c67fcf3fe36fdf923f720e995e06be67a2b971293504fcddf11610", 0x6e}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bind$802154_raw(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) 05:51:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 05:51:39 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:51:39 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000b71e00010000000000000000000000000000000000100000020010c5d5eb18e482f790e5be90d239c326c038b1dec173b0bd10b5ffe0a1d27c4532af127eb6ddf73ff80584db84927a6c57c13c97f117a6a12229ba85463f33c0c02834a402103efb1652b6975a7c07ef9ee42a8a97ded16e5efea14a883f5827f4813fff9986637fed3e756907c62d10d9073742884d1b46efa31252e626d9923512a664e2fbd51e13f76ea743223fdc8a4f54b944ece07e57ca841bfd661dc62aeb3c97c53c26b76bd050e45c76b6428c12f34ee0209421b403a071cbc4247da5708f307e"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) 05:51:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x80) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:39 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 05:51:39 executing program 1: r0 = getpid() getpriority(0x0, r0) r1 = getpid() r2 = getpid() getpriority(0x0, r2) pidfd_open(r2, 0x0) getpriority(0x0, r1) setpriority(0x1, r1, 0x10001) syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 186.024288] Bluetooth: Unexpected continuation frame (len 20) [ 186.025246] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 186.025284] Bluetooth: Unexpected continuation frame (len 20) [ 186.026884] Bluetooth: Frame is too long (len 36, expected len 4) [ 186.027906] Bluetooth: hci4: connection err: -111 [ 186.067530] Unsupported ieee802154 address type: 0 [ 186.095564] ieee802154 phy0 wpan0: encryption failed: -90 [ 186.109960] Unsupported ieee802154 address type: 0 [ 186.118859] ieee802154 phy0 wpan0: encryption failed: -90 05:51:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 05:51:48 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) 05:51:48 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) poll(&(0x7f00000006c0)=[{r6, 0x48}], 0x1, 0x1) 05:51:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) lseek(r0, 0x8, 0x4) r1 = getpid() r2 = pidfd_open(r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) write$tun(r0, 0x0, 0x0) lseek(r0, 0xfa1, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xe00, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000002000000ad25f6ffff010000ff01000000000000668505c01170186c"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10043, 0x1) syncfs(r4) [ 194.920075] Bluetooth: Unexpected continuation frame (len 20) [ 194.920970] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 194.922437] Bluetooth: Unexpected continuation frame (len 20) 05:51:48 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 05:51:48 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:51:48 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x17, 0xff}, {0x6, 0x3}, 0x37, 0x3, 0x8}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r3, 0x8}) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x10}) 05:51:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) [ 194.926012] Bluetooth: Frame is too long (len 36, expected len 4) [ 194.927933] Bluetooth: hci4: connection err: -111 05:51:48 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04480f080003c80001c8a43d4d14eb3114007b684370cc7d3452897f7ab2858cc15eecd1795cd8d512b4b2d079160da36d8af86514c82f10a07ae00a50e3939ae66917d70b26a628859ba31307f7efc3b4a19dc6be12a274d95a86cf06918a3c6f34636c4d0796b442f79d0599db6299814695da1bc36fbef4621e804eceeee4b704ece077754414eb21c03e8de4e561b3e304698dba04ebe4ae35f024703e469a0b761d2589728911e51735f57ccfe2690b0ab7c57c73b08eeffa96d63b9b05b159d1389e65cf36628ebc0b57c4160c12bc4b09367d9844c2167b59713a5d3c2d3094ca4126e88d05dc0e8f175218fd8283a542cb39242e5a9411ba82aaeb4f21b9489a1d749c5342a811cc222b2673e6bee0dafee069d12c776da0"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) [ 194.969859] kernel profiling enabled (shift: 43) [ 194.970793] profiling shift: 43 too large [ 194.986478] Bluetooth: Unexpected continuation frame (len 20) [ 194.998302] kernel profiling enabled (shift: 43) [ 194.999072] profiling shift: 43 too large [ 195.001667] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 195.001994] Bluetooth: Unexpected continuation frame (len 20) [ 195.016636] Bluetooth: Frame is too long (len 36, expected len 4) [ 195.020816] Bluetooth: hci4: connection err: -111 05:51:49 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) 05:51:49 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:51:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000002000000000000000000000000000000000000000000000000000000000000000004024db6c00000000000000000000000000000000000000000000000000000000000008000000000000000000000000e0000001ac1478e061745e65a314aa000000000000000000000000000000000000000000000000000000000000003a8b00"/184]}) 05:51:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x570, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '{)'}, {0x20, '\x00'}]}, 0x10) 05:51:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:49 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 195.250707] Bluetooth: Unexpected continuation frame (len 20) [ 195.254648] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 195.254687] Bluetooth: Unexpected continuation frame (len 20) [ 195.259891] Bluetooth: Frame is too long (len 36, expected len 4) [ 195.260645] Bluetooth: hci4: connection err: -111 05:51:58 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="010429bd7000fcdbdf252d000000bd6a4500466265de392e0e8c1d0d3ba357d3faca34c4fa7a971f7de69a53a0786203b2fcb1cb9f8b1e9e6988d595235f3a5994daa731a7d734e1f9394abef3aab27545271b68d2a2d9243585c2a99a40aeadf20e82857a550b3cdb71fa6d3e30277bdaedd61fbb062ce8998a59516666cf2c94c7fff725b13c0857fd44390ac6cb18dbcab69d8717879b2ea761217b47a27701ff8bd7b276a4594425ab464da90c34316d180aeb15b9e1314f9c73cf53da9d5c65a20bd545587da10f5f218e3cd71175e13aedaa810f42a3a223447f54aa7e9dfaf414040000008900450021340f1641cc28879837142bbe7681c51adee491460db976cec493a045a2af24d577ab73961062c8a930846aa04232f549608968a90bb2610cb63eac348f44b79648025ee00332889ddfb79b34a062102c63c41b364e14ebc48b2af0113ab3a2e0bed216ebbf73c8f5a1d0c10461e40b738d9acd919c0ace022313101f8c9bc648d2efb2460000005b004500cf9ad4b8c0e93288ddde0ab67d3ec5a722f6654da60d0dc8961a5a1fb93fe3627bb2d1366b8c50a96b1af1545c77e70100701a405bddcf401db495b7418d726b1d31e44f15e6d318c728335727e889e774b6d6d5156f6c00da004500ab431d0cb04c9dc841acb72cb60ea101d292a1f770fee87525f539389be90656641b31df5f203196af9802448200b03f430100008032ad9e7bc28d5251d7a8a1cbf0e475f397f2b636ccaefc2f56d2a26aab38e76ee82d5f3b67722dbd78397055db871394e9a1eafbc97be8b01e232ef3168a089f2e89e056e59f6fadb6fe40131a79f4c1d8675b3991496611daf7df982e487ed0411481bcf52ec690c1325a9be1f05b5ccc4d23a83eb51f506641411e9acd602a7be6cb6aa1d363cdbd01650caa38ceeb75ba21512c66fa276dcf83f4ae2d0275fe879c1891662084fa174a57d8ad54b4b8c4a78ed406c2b60b000084004500a0fceb8ea636db573fe560687746a2e2f6d8ca3c03370cacccded65e986c4d6dd3640fc82256c8179b32b1c2eb8e27a0de6eb00d2ffde434ff85c0e5575cd16968bf669e460c9d67c389d9b22cc27c51bf3718aeb786977882d7213022864a79e9dc44d6eb89ae9eb136641ab7869c2bafb67ab4761148621603f7144472a3bff0004500ba7b8a110b72df9011f0cab86d4e75b38cd3be3c6fc06299f697b1c8f645ee136cd191fbbadcb74cec7f9f02dddf9e8a7fddd0f7a2a6b8bff45306918e3af1b6c53b232351a52cd78c524968805d1d7fed08f3117598ae0e0918d11dfd580009c89a9b8a7dfbe6b9c9635089ea4c284281775a379cf7082aef99142881ba485e950b239b160000ac8b891cabcaedb2ba47fae4dbaca83b67f8e98f8c0cea675a06a680849ebf9020492c7789e24d8eca78bf7de8d8bfcfb42542fafe28eff19279970636f04c3501c8ec5abd1bdd86f3990d8204e5b7826ddf31e77678a52023a3c85cd2ed08033a4e73ac406900450075874cd48650382242328c26f7931df9aeb4cb39c0ff9f5ace13126352efe32b797287706718c8addad10fd16aa693ecf4f0d21a5865de799862073aa6e3b86e043e99369e5a743e5748a3a8cf83ff7375c2aed97367bb23aad833f9e5299d342451828d0c000000dc004500d638a59382f19240fe7805f4a8877ed4fc991324418e5c63e5571f4b13ca6263e12cc070caf62b79b078c41f1d5fa4e9b315e43f86667f6764fc46eb41a86d110c2e851e14b7e640b8537335e35e4aae5e17cd552e135007936dbe22be2aff26fbdff4eafdb994332f987d08dafbbfa5b7c3f7542fa26b47020a2d8269e9454cc214614bd9f3e26c5cfe244fd60ab1b27cdd2dcf6fa63330857451a721d8bb09278427ea9a9727493763aef01691f240bc23dcc81d7e6e9923969265081934b1"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) 05:51:58 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 05:51:58 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:51:58 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 05:51:58 executing program 2: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 05:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40005) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:58 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') set_mempolicy(0x8000, &(0x7f0000000040)=0x7, 0x100000000) creat(&(0x7f0000000180)='./file0\x00', 0x40) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x3, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x3) 05:51:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/135, 0x87, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x84, 0x0) [ 204.281603] Bluetooth: Unexpected continuation frame (len 20) [ 204.283437] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 204.283529] Bluetooth: Unexpected continuation frame (len 20) [ 204.287971] Bluetooth: Frame is too long (len 36, expected len 4) [ 204.289595] Bluetooth: hci4: connection err: -111 05:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:51:58 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04480f080003c80001c8a43d4d14eb3114007b684370cc7d3452897f7ab2858cc15eecd1795cd8d512b4b2d079160da36d8af86514c82f10a07ae00a50e3939ae66917d70b26a628859ba31307f7efc3b4a19dc6be12a274d95a86cf06918a3c6f34636c4d0796b442f79d0599db6299814695da1bc36fbef4621e804eceeee4b704ece077754414eb21c03e8de4e561b3e304698dba04ebe4ae35f024703e469a0b761d2589728911e51735f57ccfe2690b0ab7c57c73b08eeffa96d63b9b05b159d1389e65cf36628ebc0b57c4160c12bc4b09367d9844c2167b59713a5d3c2d3094ca4126e88d05dc0e8f175218fd8283a542cb39242e5a9411ba82aaeb4f21b9489a1d749c5342a811cc222b2673e6bee0dafee069d12c776da0"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 05:51:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/135, 0x87, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x84, 0x0) 05:51:58 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) [ 204.573483] Bluetooth: Unexpected continuation frame (len 20) [ 204.574803] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 204.574864] Bluetooth: Unexpected continuation frame (len 20) [ 204.584005] Bluetooth: Frame is too long (len 36, expected len 4) [ 204.594093] Bluetooth: hci4: connection err: -111 05:51:58 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) 05:51:58 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="686964652c6769643dfd430fa7a7383a0732d4500ae6938edc2babe73f5d9de44014d09313ebeb7822047b5e15a90c68373debc439102b216a4c5e4dd805f66635bd7b5ff23b19fe0aab3a5c4254b908b6efc5ef47bf887e703c2ca1be56e78d7733b51bc92ddd22886f2fe05223e6f060e9709149940cfd4c876dc12131afd76b84a9422d7fa380c38ad5c5eeb4b3758350c9383aec4017ab7aeebdc1fc092bcbc05d07a21287c8dd067230", @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000000,\x00']) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) r2 = open_tree(r0, &(0x7f00000000c0)='./file1\x00', 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2000000, &(0x7f0000001c40)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,uname=iso9660\x00,obj_user=\x00,uid<', @ANYRESDEC=0x0, @ANYBLOB="9b42e6649bfea6f320bdb6e1569121876754d38f6878d2fe68f82509d5a33f2926c8e71c5e8912f4bfcc2c8fbccaf9385ed58c857157e0176af3dc9a0310317ee066", @ANYRESDEC, @ANYBLOB=',defcontext=sysadm_u,defcontext=system_u,fowner=', @ANYRESDEC, @ANYBLOB=',\x00']) pwritev2(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x3) name_to_handle_at(r3, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x63, 0x7, 0x2, 0x81}}, &(0x7f0000000300), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x400200, 0x1d9) r4 = syz_mount_image$iso9660(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x47, 0x8, &(0x7f0000001a40)=[{&(0x7f0000000680)="aab90a9764c5a04be64d1e703cf7a5ded1c2c7be1e4b2c4a92b98e260702b3a3bde87262572f7a19744e14c5739b144d91853062b8ccf4a131f64e8b", 0x3c, 0x401}, {&(0x7f00000006c0)="d39b33469d4e5f5e472760547af48f128369c2882c92e0f69c6804c60c00782b3d8351bb0f7bb36f7442b00928282d5dfadb743d5aec4fa92d26c5e9a6f45667a9e3079f62038931cf9228e48beffced63c04f125b5c0154440247c525aa7cc1d102e5331d7c1016bfd9c791cbaca1d661d585a17b1e8971451ad0cbce58d980d4d2a325c2ce90bbf3ada254aec38915b79131e4d1", 0x95}, {&(0x7f0000000780)="bb2b1cddb0be8f236d7ddd3034794994bac57d1f0b451eddbc4ccc91453153fb5cfeddcd47fd18272d0401d7178cac024b3344bc3616d48236fdfd64558a7a6cff37da4bcd4ef657f507876ea57bd2079b642c9e68584a5e55b4ebb4afe66cf3c86bd69c2a31d51c61c2e6cf72", 0x6d, 0xedb}, {&(0x7f0000000800)="05867abc586b4bacc0f4110e5fb50fa16f7327d13d5f44688e6b7420b72c28b8938599e72317edce962c52ad946f3aefaa807b08cfcb912ca67e1f92849519d1d07b97df8c6f14eb08de45ac58882b24b63085e2085edbb840b65463070bd1ec6548b9bea3d1b1a7", 0x68, 0x7}, {&(0x7f0000000880)="37828390ba38ccb01fe6894c0dbd774066868fe9c4e793ef7a1a1dc7366d1f2d14dee3ffafdd70fbcbc4705c21f2841909d73fdf45a83cdd4f2225c6d44d33f09a3481fedbd1566505ce4516d657277c4f9385896cc6cb0ba46fafe2673a2877c9eb7dd9c4e3c27efc6ee824b64bb17d7bec971a06809fc985c76f9aa94c1db630", 0x81, 0x4}, {&(0x7f0000000940)="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", 0x1000, 0x5}, {&(0x7f0000001940)="3c389050d4d5a4852d540940d0b425c114", 0x11, 0xd4f}, {&(0x7f0000001980)="856583cb1ff6c53fde91a421fbe0c253e90605f5fb4ec1bc13253b0b57edfcbd1fd590266dce8bac27cbaa2186c40751235cb9de3b95265c831d68247099e4fef8a6623071a38c4561df44d9393154b8744921c78cd2baa4d49e24346b614a2f682800aec71ca2652f4148ce21fa0dbd11dcf5d0d14bcfce8e671f9a5a8cf81bf08429d3565511647da50754110f846a25c678817cd066b766fa37beed9c575be7a4ba2091b70d54a7019de5366d0b1eaa4d3bc0", 0xb4, 0x80000000}], 0x180, &(0x7f0000001b00)={[{@unhide}, {@block={'block', 0x3d, 0xa00}}, {@unhide}, {@block={'block', 0x3d, 0xc00}}, {@uid}, {@block={'block', 0x3d, 0xa00}}, {@uid={'uid', 0x3d, 0xee00}}], [{@dont_appraise}, {@seclabel}, {@smackfsfloor}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x92}}]}) openat(r4, &(0x7f0000001c00)='./file0\x00', 0xe0000, 0x24) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x2049, &(0x7f0000000500)={0x0, 0x3fd1, 0x4, 0x1, 0x18d, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) faccessat2(r2, &(0x7f0000000100)='./file0\x00', 0x80, 0x1200) 05:51:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000040)) open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x88) 05:51:58 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 204.790072] loop2: detected capacity change from 0 to 4 [ 204.801873] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 204.817149] iso9660: Bad value for 'gid' [ 204.817954] iso9660: Bad value for 'gid' [ 204.822492] loop2: detected capacity change from 0 to 4 [ 204.833694] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 204.869761] 9pnet_fd: p9_fd_create_tcp (4398): problem connecting socket to 127.0.0.1 [ 204.901440] loop0: detected capacity change from 0 to 264192 [ 204.926497] iso9660: Bad value for 'gid' [ 204.927192] iso9660: Bad value for 'gid' [ 204.945461] Bluetooth: Unexpected continuation frame (len 20) [ 204.950705] 9pnet_fd: p9_fd_create_tcp (4398): problem connecting socket to 127.0.0.1 [ 204.951952] loop0: detected capacity change from 0 to 264192 [ 204.955486] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 204.958316] Bluetooth: Unexpected continuation frame (len 20) [ 204.963847] Bluetooth: Frame is too long (len 36, expected len 4) [ 204.968282] Bluetooth: hci4: connection err: -111 [ 208.340220] Bluetooth: hci3: command 0x0406 tx timeout [ 208.341452] Bluetooth: hci0: command 0x0406 tx timeout [ 208.343724] Bluetooth: hci6: command 0x0406 tx timeout [ 208.344739] Bluetooth: hci1: command 0x0406 tx timeout [ 208.346173] Bluetooth: hci4: command 0x0406 tx timeout [ 208.347167] Bluetooth: hci2: command 0x0406 tx timeout [ 208.348303] Bluetooth: hci7: command 0x0406 tx timeout [ 208.349306] Bluetooth: hci5: command 0x0406 tx timeout 05:52:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000650900af6699bc4726ed798e0413f389b7b992be28ca0029b4f6d090b2088bdc68475eca469eefd6010000000000000008bae90d1e0096067c6d85b8164de813d77c8d170134557f0000000000000026b249a8645c4d1067b72669d9c6c663b69c16ff04eb4a33dd1c7093a4354f0532e1bf6f79b8f32c5de973788eece2bbed834bf7b54b9452538fdc3651092f3e860a2b8148dcf2f6ad70af89102a02e0038de395333fcb2d0900a58889646fd3e96100000000000000002b2d71bc7c"]) creat(&(0x7f0000000040)='./file1\x00', 0x42) 05:52:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:07 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) 05:52:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/135, 0x87, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x84, 0x0) 05:52:07 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) 05:52:07 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) 05:52:07 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) 05:52:07 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) [ 213.767662] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 213.771410] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 213.773344] Bluetooth: Unexpected continuation frame (len 20) [ 213.778166] Bluetooth: Frame is too long (len 36, expected len 4) 05:52:07 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:52:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/135, 0x87, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x84, 0x0) 05:52:07 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) 05:52:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000650900af6699bc4726ed798e0413f389b7b992be28ca0029b4f6d090b2088bdc68475eca469eefd6010000000000000008bae90d1e0096067c6d85b8164de813d77c8d170134557f0000000000000026b249a8645c4d1067b72669d9c6c663b69c16ff04eb4a33dd1c7093a4354f0532e1bf6f79b8f32c5de973788eece2bbed834bf7b54b9452538fdc3651092f3e860a2b8148dcf2f6ad70af89102a02e0038de395333fcb2d0900a58889646fd3e96100000000000000002b2d71bc7c"]) creat(&(0x7f0000000040)='./file1\x00', 0x42) 05:52:07 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 214.005278] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 214.009790] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 214.009863] Bluetooth: Unexpected continuation frame (len 20) [ 214.012719] Bluetooth: Frame is too long (len 36, expected len 4) 05:52:17 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:17 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 05:52:17 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) 05:52:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}}, 0x20040000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/135, 0x87, 0x5) msgget$private(0x0, 0x0) 05:52:17 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:52:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000650900af6699bc4726ed798e0413f389b7b992be28ca0029b4f6d090b2088bdc68475eca469eefd6010000000000000008bae90d1e0096067c6d85b8164de813d77c8d170134557f0000000000000026b249a8645c4d1067b72669d9c6c663b69c16ff04eb4a33dd1c7093a4354f0532e1bf6f79b8f32c5de973788eece2bbed834bf7b54b9452538fdc3651092f3e860a2b8148dcf2f6ad70af89102a02e0038de395333fcb2d0900a58889646fd3e96100000000000000002b2d71bc7c"]) creat(&(0x7f0000000040)='./file1\x00', 0x42) 05:52:17 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) 05:52:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/135, 0x87, 0x5) [ 223.286838] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 223.304754] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 223.304935] Bluetooth: Unexpected continuation frame (len 20) [ 223.306354] Bluetooth: Frame is too long (len 36, expected len 4) 05:52:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:52:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x34}}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:26 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:26 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:26 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) 05:52:26 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:26 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:52:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000650900af6699bc4726ed798e0413f389b7b992be28ca0029b4f6d090b2088bdc68475eca469eefd6010000000000000008bae90d1e0096067c6d85b8164de813d77c8d170134557f0000000000000026b249a8645c4d1067b72669d9c6c663b69c16ff04eb4a33dd1c7093a4354f0532e1bf6f79b8f32c5de973788eece2bbed834bf7b54b9452538fdc3651092f3e860a2b8148dcf2f6ad70af89102a02e0038de395333fcb2d0900a58889646fd3e96100000000000000002b2d71bc7c"]) creat(&(0x7f0000000040)='./file1\x00', 0x42) 05:52:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 232.963674] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 232.965882] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 232.965924] Bluetooth: Unexpected continuation frame (len 20) [ 232.970031] Bluetooth: Frame is too long (len 36, expected len 4) [ 232.970706] Bluetooth: hci4: connection err: -111 05:52:27 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) 05:52:27 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:27 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:27 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:52:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000650900af6699bc4726ed798e0413f389b7b992be28ca0029b4f6d090b2088bdc68475eca469eefd6010000000000000008bae90d1e0096067c6d85b8164de813d77c8d170134557f0000000000000026b249a8645c4d1067b72669d9c6c663b69c16ff04eb4a33dd1c7093a4354f0532e1bf6f79b8f32c5de973788eece2bbed834bf7b54b9452538fdc3651092f3e860a2b8148dcf2f6ad70af89102a02e0038de395333fcb2d0900a58889646fd3e96100000000000000002b2d71bc7c"]) [ 233.202807] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 233.204087] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 233.204683] Bluetooth: Unexpected continuation frame (len 20) 05:52:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 233.211091] Bluetooth: hci4: connection err: -111 05:52:27 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:37 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 05:52:37 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a196cba5c251b0b3834cc8208"], 0xb8}}, 0x0) 05:52:37 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000b71e00010000000000000000000000000000000000100000020010c5d5eb18e482f790e5be90d239c326c038b1dec173b0bd10b5ffe0a1d27c4532af127eb6ddf73ff80584db84927a6c57c13c97f117a6a12229ba85463f33c0c02834a402103efb1652b6975a7c07ef9ee42a8a97ded16e5efea14a883f5827f4813fff9986637fed3e756907c62d10d9073742884d1b46efa31252e626d9923512a664e2fbd51e13f76ea743223fdc8a4f54b944ece07e57ca841bfd661dc62aeb3c97c53c26b76bd050e45c76b6428c12f34ee0209421b403a071cbc4247da5708f307e"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 243.255631] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 243.256461] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 243.256826] Bluetooth: Unexpected continuation frame (len 20) [ 243.260514] Bluetooth: hci4: connection err: -111 05:52:37 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 243.308198] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 243.309401] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 243.310001] Bluetooth: Unexpected continuation frame (len 20) [ 243.312592] Bluetooth: hci4: connection err: -111 05:52:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) [ 243.487467] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 243.488215] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 243.489383] Bluetooth: Unexpected continuation frame (len 20) [ 243.491733] Bluetooth: Frame is too long (len 36, expected len 4) [ 243.493485] Bluetooth: hci4: connection err: -111 05:52:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:52:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 243.655954] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 243.656878] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 243.656911] Bluetooth: Unexpected continuation frame (len 20) [ 243.658017] Bluetooth: Frame is too long (len 36, expected len 4) [ 243.658642] Bluetooth: hci4: connection err: -111 05:52:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:52:37 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:52:37 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:37 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:37 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 243.776658] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 243.777544] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 243.777664] Bluetooth: Unexpected continuation frame (len 20) [ 243.781322] Bluetooth: Frame is too long (len 36, expected len 4) [ 243.785695] Bluetooth: hci4: connection err: -111 05:52:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:46 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:46 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:52:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:52:46 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:46 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 252.749930] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 252.751039] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 252.752186] Bluetooth: Unexpected continuation frame (len 20) [ 252.753805] Bluetooth: Frame is too long (len 36, expected len 4) [ 252.754409] Bluetooth: hci4: connection err: -111 05:52:57 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:57 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:57 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="010429bd7000fcdbdf252d000000bd6a4500466265de392e0e8c1d0d3ba357d3faca34c4fa7a971f7de69a53a0786203b2fcb1cb9f8b1e9e6988d595235f3a5994daa731a7d734e1f9394abef3aab27545271b68d2a2d9243585c2a99a40aeadf20e82857a550b3cdb71fa6d3e30277bdaedd61fbb062ce8998a59516666cf2c94c7fff725b13c0857fd44390ac6cb18dbcab69d8717879b2ea761217b47a27701ff8bd7b276a4594425ab464da90c34316d180aeb15b9e1314f9c73cf53da9d5c65a20bd545587da10f5f218e3cd71175e13aedaa810f42a3a223447f54aa7e9dfaf414040000008900450021340f1641cc28879837142bbe7681c51adee491460db976cec493a045a2af24d577ab73961062c8a930846aa04232f549608968a90bb2610cb63eac348f44b79648025ee00332889ddfb79b34a062102c63c41b364e14ebc48b2af0113ab3a2e0bed216ebbf73c8f5a1d0c10461e40b738d9acd919c0ace022313101f8c9bc648d2efb2460000005b004500cf9ad4b8c0e93288ddde0ab67d3ec5a722f6654da60d0dc8961a5a1fb93fe3627bb2d1366b8c50a96b1af1545c77e70100701a405bddcf401db495b7418d726b1d31e44f15e6d318c728335727e889e774b6d6d5156f6c00da004500ab431d0cb04c9dc841acb72cb60ea101d292a1f770fee87525f539389be90656641b31df5f203196af9802448200b03f430100008032ad9e7bc28d5251d7a8a1cbf0e475f397f2b636ccaefc2f56d2a26aab38e76ee82d5f3b67722dbd78397055db871394e9a1eafbc97be8b01e232ef3168a089f2e89e056e59f6fadb6fe40131a79f4c1d8675b3991496611daf7df982e487ed0411481bcf52ec690c1325a9be1f05b5ccc4d23a83eb51f506641411e9acd602a7be6cb6aa1d363cdbd01650caa38ceeb75ba21512c66fa276dcf83f4ae2d0275fe879c1891662084fa174a57d8ad54b4b8c4a78ed406c2b60b000084004500a0fceb8ea636db573fe560687746a2e2f6d8ca3c03370cacccded65e986c4d6dd3640fc82256c8179b32b1c2eb8e27a0de6eb00d2ffde434ff85c0e5575cd16968bf669e460c9d67c389d9b22cc27c51bf3718aeb786977882d7213022864a79e9dc44d6eb89ae9eb136641ab7869c2bafb67ab4761148621603f7144472a3bff0004500ba7b8a110b72df9011f0cab86d4e75b38cd3be3c6fc06299f697b1c8f645ee136cd191fbbadcb74cec7f9f02dddf9e8a7fddd0f7a2a6b8bff45306918e3af1b6c53b232351a52cd78c524968805d1d7fed08f3117598ae0e0918d11dfd580009c89a9b8a7dfbe6b9c9635089ea4c284281775a379cf7082aef99142881ba485e950b239b160000ac8b891cabcaedb2ba47fae4dbaca83b67f8e98f8c0cea675a06a680849ebf9020492c7789e24d8eca78bf7de8d8bfcfb42542fafe28eff19279970636f04c3501c8ec5abd1bdd86f3990d8204e5b7826ddf31e77678a52023a3c85cd2ed08033a4e73ac406900450075874cd48650382242328c26f7931df9aeb4cb39c0ff9f5ace13126352efe32b797287706718c8addad10fd16aa693ecf4f0d21a5865de799862073aa6e3b86e043e99369e5a743e5748a3a8cf83ff7375c2aed97367bb23aad833f9e5299d342451828d0c000000dc004500d638a59382f19240fe7805f4a8877ed4fc991324418e5c63e5571f4b13ca6263e12cc070caf62b79b078c41f1d5fa4e9b315e43f86667f6764fc46eb41a86d110c2e851e14b7e640b8537335e35e4aae5e17cd552e135007936dbe22be2aff26fbdff4eafdb994332f987d08dafbbfa5b7c3f7542fa26b47020a2d8269e9454cc214614bd9f3e26c5cfe244fd60ab1b27cdd2dcf6fa63330857451a721d8bb09278427ea9a9727493763aef01691f240bc23dcc81d7e6e9923969265081934b1"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:52:57 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 263.609856] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 263.615763] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 263.615979] Bluetooth: Unexpected continuation frame (len 20) [ 263.620685] Bluetooth: Frame is too long (len 36, expected len 4) [ 263.626524] Bluetooth: hci4: connection err: -111 05:52:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:57 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:52:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 263.839089] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 263.842819] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 263.848359] Bluetooth: Unexpected continuation frame (len 20) [ 263.851048] Bluetooth: Frame is too long (len 36, expected len 4) [ 263.852540] Bluetooth: hci4: connection err: -111 05:52:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:52:57 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:57 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 264.057535] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 264.060973] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 264.064581] Bluetooth: Frame is too long (len 36, expected len 4) [ 264.070787] Bluetooth: hci4: connection err: -111 05:52:58 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:58 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:52:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:52:58 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69f460e0", @ANYRES16=r3, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x44054}, 0x20008850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:58 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:52:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 264.347922] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 264.356576] Bluetooth: Frame is too long (len 36, expected len 4) [ 264.362538] Bluetooth: hci4: connection err: -111 05:53:07 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000640)=0x3, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:53:07 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000b71e00010000000000000000000000000000000000100000020010c5d5eb18e482f790e5be90d239c326c038b1dec173b0bd10b5ffe0a1d27c4532af127eb6ddf73ff80584db84927a6c57c13c97f117a6a12229ba85463f33c0c02834a402103efb1652b6975a7c07ef9ee42a8a97ded16e5efea14a883f5827f4813fff9986637fed3e756907c62d10d9073742884d1b46efa31252e626d9923512a664e2fbd51e13f76ea743223fdc8a4f54b944ece07e57ca841bfd661dc62aeb3c97c53c26b76bd050e45c76b6428c12f34ee0209421b403a071cbc4247da5708f307e"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:07 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:07 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:53:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) [ 273.684938] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 273.688924] Bluetooth: Frame is too long (len 36, expected len 4) [ 273.691722] Bluetooth: hci4: connection err: -111 05:53:07 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="04ff142abe4cb17859111632ad28ed1616893cdc061c1f04102a800f3a1dff276c2d13d20e8524c828c323fe4b044587506c5a7db8537f9ea5ace50d9789dcedb79100b4aede4d5956cd11af5533eb061e04244261ac4447f2451a4e70b6e3ee473b042c5316637f5bcf03dbb108f57f3627784573d86e80cb184ea70fb4df84a0f986434519ac4d7d72b72ab34d6ff2b2aeeff8d21140d5456e2f01d14230fad3e0abd7d49e24a221cad6d50069cbaf942fc638d79c383dfb15f706106335c8e164370026696d5fe2b2547801a6f7bdfe49a12f3061dd5a1982d4d72a2deba3e1ba55cc858135da3aaba9171507aefded1b6062512cf1f403533931974ed10b6f50f14d148bffbcd4fa5b4e6a6c16ac6eaed9bd2f50484150691376905a0440409d8e5988ff2f80759d96b79d78a8768cd92904ec0ef9a78fe01b63c9a4644cd287742c184585c347f55ce75ce367dcedfcc6ca7a2513e7bd6334ec00a73c6342f945a96ab1d08d82405f298fb629aba93886aff970405992d248f332d0e3db0d4dff27afc4eebeef00a734d8453db0620aa7c5618bef7c68fcbafe1e8ca931613c9f0a0c5f5fa33ae7181916540ea0bfc38dd19843bdc754e0d22d60468881478314d3b93e"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:53:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) [ 274.044558] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 274.052854] Bluetooth: Frame is too long (len 36, expected len 4) [ 274.053956] Bluetooth: hci4: connection err: -111 05:53:19 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:19 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:53:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:53:19 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f7", @ANYRES16=r3, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:19 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="02c81014ea0f00050063000600e24fe74f6fc4a020761398fdab2c6f0ffe60fa2618516e7ac96bc530f1480f765db4523ed1d70c152ecfdab8d56d9e63327bb7c1dece954b6b94a57f35c76db7f871688abfcdd322461495161fd725380d0d9c8cd66506acb9e9475ae4e5b8f4aae4db9e1481118b64fe73e548abb4bc200ee62118821c641e5a433bcda44cf2e0a251514b59b0a4b07ef3aaef33313f99a2fcdecaff43bf4eb6e9bf3c6bea105f46c7af3920ff1a63000098814d04ad25d0f1dfa2860470ed"], 0x19) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) [ 285.696792] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 285.697875] Bluetooth: Frame is too long (len 36, expected len 4) [ 285.698680] Bluetooth: hci4: connection err: -111 05:53:19 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 285.796562] Bluetooth: Frame is too long (len 36, expected len 4) [ 285.797281] Bluetooth: hci4: connection err: -111 05:53:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:53:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:53:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:53:19 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 285.995755] Bluetooth: Frame is too long (len 36, expected len 4) [ 285.997677] Bluetooth: hci4: connection err: -111 05:53:19 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:19 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 286.080986] Bluetooth: Frame is too long (len 36, expected len 4) [ 286.083874] Bluetooth: hci4: connection err: -111 05:53:20 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:20 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:20 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0xb8}}, 0x0) [ 286.144999] Bluetooth: Frame is too long (len 36, expected len 4) [ 286.147838] Bluetooth: hci4: connection err: -111 05:53:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20000800) 05:53:29 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:29 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:53:29 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0xb8}}, 0x0) 05:53:29 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 296.067392] Bluetooth: Frame is too long (len 36, expected len 4) [ 296.070237] Bluetooth: hci4: connection err: -111 05:53:39 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:39 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:53:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20000800) 05:53:39 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:39 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0xb8}}, 0x0) [ 305.734232] Bluetooth: Frame is too long (len 36, expected len 4) [ 305.735410] Bluetooth: hci4: connection err: -111 05:53:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x20000800) 05:53:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:53:39 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:39 executing program 2: perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:53:39 executing program 6: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 305.943904] Bluetooth: Frame is too long (len 36, expected len 4) 05:53:39 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 305.948942] Bluetooth: hci4: connection err: -111 05:53:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:53:39 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:39 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:53:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:53:40 executing program 2: perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 306.130574] Bluetooth: Frame is too long (len 36, expected len 4) [ 306.131762] Bluetooth: hci4: connection err: -111 05:53:40 executing program 6: eventfd2(0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 7: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04227f09d68b039ac025ffffffffffff80022571ac0600000000ffffffff0440f3e2f6690008aaaaaaaaaa1006fc3a43030008050000000000000309d597d20600130000000000001c00acc74905005aaaaaaaaaaa0d0302b884888c8a03ffffffffffff061fcfc1330ea6010000000000000405f76e7a0200ffaaaaaaaaaa127f67"], 0x82) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20000800) 05:53:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:53:49 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:53:49 executing program 2: perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20000800) [ 315.578869] Bluetooth: Frame is too long (len 36, expected len 4) [ 315.582056] Bluetooth: hci4: connection err: -111 05:53:49 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "32855258c9fda711a7c8c90d11be190072925d28e4ba1e685e643a484107405ed6875e29bc70c6c88a0ba313acb6bea195e14ff686b9f5bba9a11a21d4f3e77182814b945f83317abc0ad438ce2c90ba99aef519777d41d6dfb41d4e0e987bdb66a35a466a7732c6c9c3c1b6d23dd7bddb5b4a07d3ea6dc359c5c9"}, 0x7f) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:53:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a5897"], 0xb8}}, 0x0) 05:53:49 executing program 6: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:49 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 315.732048] Bluetooth: Frame is too long (len 36, expected len 4) [ 315.733047] Bluetooth: hci4: connection err: -111 05:53:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a5897"], 0xb8}}, 0x0) 05:53:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000980), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:53:58 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:53:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20000800) [ 324.793964] Bluetooth: Frame is too long (len 36, expected len 4) [ 324.795085] Bluetooth: hci4: connection err: -111 05:53:58 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 324.875016] Bluetooth: hci4: connection err: -111 05:53:58 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a5897"], 0xb8}}, 0x0) 05:53:58 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:53:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:08 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:54:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:08 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20000800) 05:54:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9"], 0xb8}}, 0x0) 05:54:08 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 335.097480] Bluetooth: hci4: connection err: -111 [ 335.107484] Zero length message leads to an empty skb 05:54:09 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:54:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9"], 0xb8}}, 0x0) 05:54:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20000800) [ 335.256149] Bluetooth: hci4: connection err: -111 05:54:09 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:09 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:09 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:09 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 335.507392] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 335.511706] Bluetooth: hci4: connection err: -111 05:54:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9"], 0xb8}}, 0x0) 05:54:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:54:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20000800) 05:54:20 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 346.744189] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 346.744894] Bluetooth: hci4: connection err: -111 05:54:20 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:54:20 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:20 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:20 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:54:20 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 347.006172] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 347.006875] Bluetooth: hci4: connection err: -111 05:54:30 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:54:30 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{0xa, 0x7}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:54:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 356.932572] Bluetooth: Frame is too long (len 36, expected len 4) [ 356.938194] Bluetooth: hci4: connection err: -111 05:54:30 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff7cdad03a470a"], 0xb8}}, 0x0) 05:54:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39, 0x2}, {0xf3fe}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:54:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 364.797799] Bluetooth: hci4: connection err: -111 05:54:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39, 0x2}, {0xf3fe}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:54:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:54:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 364.938566] Bluetooth: hci4: connection err: -111 05:54:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39, 0x2}, {0xf3fe}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 365.070922] Bluetooth: hci4: connection err: -111 05:54:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req={{}, {0x9}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:47 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:54:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:54:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) [ 373.136823] Bluetooth: Frame is too long (len 36, expected len 4) [ 373.138827] Bluetooth: hci4: connection err: -111 05:54:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:54:47 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:54:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:54:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 373.235486] Bluetooth: Frame is too long (len 36, expected len 4) [ 373.237423] Bluetooth: hci4: connection err: -111 05:54:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:54:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}, {0xf3fe}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 373.364291] Bluetooth: Frame is too long (len 36, expected len 4) [ 373.365647] Bluetooth: hci4: connection err: -111 05:54:57 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:54:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:54:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:54:57 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:54:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:54:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:54:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:54:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) [ 383.898339] Bluetooth: hci4: connection err: -111 05:55:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f"], 0xb8}}, 0x0) 05:55:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:55:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x60}}, 0x20000800) 05:55:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:55:06 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:55:06 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:55:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71"], 0xb8}}, 0x0) 05:55:06 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) [ 392.786282] Bluetooth: hci4: connection err: -111 05:55:06 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:55:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\!\\[!\x00'}]}, 0x4c}}, 0x20000800) 05:55:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71"], 0xb8}}, 0x0) 05:55:06 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) [ 392.955719] Bluetooth: hci4: connection err: -111 05:55:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71"], 0xb8}}, 0x0) 05:55:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}}, 0x20000800) 05:55:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:55:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:17 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:55:17 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{}, {0xf3fe}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) [ 403.398199] Bluetooth: Frame is too long (len 36, expected len 4) [ 403.399708] Bluetooth: hci4: connection err: -111 05:55:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 05:55:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:17 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:55:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x38}}, 0x20000800) 05:55:17 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872b"], 0xb8}}, 0x0) 05:55:17 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{}, {0xf3fe}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 403.622507] Bluetooth: Frame is too long (len 36, expected len 4) [ 403.623569] Bluetooth: hci4: connection err: -111 05:55:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:17 executing program 1: eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x1f, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) eventfd2(0x8, 0x80801) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:55:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872b"], 0xb8}}, 0x0) 05:55:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}}, 0x20000800) 05:55:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:27 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872b"], 0xb8}}, 0x0) 05:55:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}}, 0x20000800) 05:55:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:55:27 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{}, {0xf3fe}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 413.796287] Bluetooth: Frame is too long (len 36, expected len 4) [ 413.797250] Bluetooth: hci4: connection err: -111 05:55:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 05:55:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 1) 05:55:37 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x20000800) 05:55:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:37 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1200c3, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x244200, 0x12d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000650900af6699bc4726ed798e0413f389b7b992be28ca0029b4f6d090b2088bdc68475eca469eefd6010000000000000008bae90d1e0096067c6d85b8164de813d77c8d170134557f0000000000000026b249a8645c4d1067b72669d9c6c663b69c16ff04eb4a33dd1c7093a4354f0532e1bf6f79b8f32c5de973788eece2bbed834bf7b54b9452538fdc3651092f3e860a2b8148dcf2f6ad70af89102a02e0038de395333fcb2d0900a58889646fd3e96100000000000000002b2d71bc7c"]) creat(&(0x7f0000000040)='./file1\x00', 0x42) [ 423.887961] FAULT_INJECTION: forcing a failure. [ 423.887961] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 423.889057] CPU: 1 UID: 0 PID: 5358 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 423.889077] Tainted: [W]=WARN [ 423.889081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 423.889088] Call Trace: [ 423.889096] [ 423.889101] dump_stack_lvl+0xfa/0x120 [ 423.889127] should_fail_ex+0x4d7/0x5e0 [ 423.889147] _copy_from_user+0x30/0xd0 [ 423.889165] copy_msghdr_from_user+0x88/0x150 [ 423.889186] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 423.889206] ? __pfx_perf_trace_lock+0x10/0x10 [ 423.889225] ? lock_acquire+0x15e/0x2f0 [ 423.889243] ___sys_sendmsg+0xdc/0x1b0 [ 423.889262] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.889279] ? perf_trace_lock+0xb5/0x5d0 [ 423.889295] ? __pfx_perf_trace_lock+0x10/0x10 [ 423.889308] ? proc_fail_nth_write+0x97/0x220 [ 423.889326] ? lock_acquire+0x15e/0x2f0 [ 423.889339] ? __fget_files+0x34/0x3b0 [ 423.889353] ? find_held_lock+0x2b/0x80 [ 423.889372] ? __fget_files+0x203/0x3b0 [ 423.889388] ? lock_release+0xc8/0x290 [ 423.889404] ? __fget_files+0x20d/0x3b0 [ 423.889422] __sys_sendmsg+0x150/0x200 [ 423.889439] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.889463] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 423.889477] ? fput+0x6a/0x100 [ 423.889494] ? ksys_write+0x1a3/0x240 [ 423.889507] ? __pfx_ksys_write+0x10/0x10 [ 423.889526] do_syscall_64+0xbf/0x360 [ 423.889540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.889553] RIP: 0033:0x7fc6ad49cb19 [ 423.889563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.889574] RSP: 002b:00007fc6aaa12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.889586] RAX: ffffffffffffffda RBX: 00007fc6ad5aff60 RCX: 00007fc6ad49cb19 [ 423.889594] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 423.889602] RBP: 00007fc6aaa121d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.889609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.889616] R13: 00007ffe20623e5f R14: 00007fc6aaa12300 R15: 0000000000022000 [ 423.889634] [ 423.918224] Bluetooth: Frame is too long (len 36, expected len 4) [ 423.918876] Bluetooth: hci4: connection err: -111 05:55:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 2) [ 423.996989] FAULT_INJECTION: forcing a failure. [ 423.996989] name failslab, interval 1, probability 0, space 0, times 1 [ 423.997986] CPU: 1 UID: 0 PID: 5373 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 423.998005] Tainted: [W]=WARN [ 423.998009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 423.998016] Call Trace: [ 423.998021] [ 423.998025] dump_stack_lvl+0xfa/0x120 [ 423.998049] should_fail_ex+0x4d7/0x5e0 [ 423.998068] should_failslab+0xc2/0x120 [ 423.998089] kmem_cache_alloc_node_noprof+0x79/0x690 [ 423.998110] ? __pfx_netlink_insert+0x10/0x10 [ 423.998130] ? __alloc_skb+0x2ab/0x370 [ 423.998148] ? find_held_lock+0x2b/0x80 [ 423.998170] ? __alloc_skb+0x2ab/0x370 [ 423.998185] __alloc_skb+0x2ab/0x370 [ 423.998203] ? __pfx___alloc_skb+0x10/0x10 [ 423.998231] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 423.998253] netlink_alloc_large_skb+0x69/0x150 [ 423.998273] netlink_sendmsg+0x676/0xd80 [ 423.998298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.998327] ____sys_sendmsg+0xa67/0xc20 [ 423.998343] ? copy_msghdr_from_user+0xfb/0x150 [ 423.998361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.998384] ? lock_acquire+0x15e/0x2f0 [ 423.998401] ___sys_sendmsg+0x10f/0x1b0 [ 423.998420] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.998437] ? perf_trace_lock+0xb5/0x5d0 [ 423.998454] ? __pfx_perf_trace_lock+0x10/0x10 [ 423.998467] ? proc_fail_nth_write+0x97/0x220 [ 423.998484] ? lock_acquire+0x15e/0x2f0 [ 423.998497] ? __fget_files+0x34/0x3b0 [ 423.998509] ? find_held_lock+0x2b/0x80 [ 423.998527] ? __fget_files+0x203/0x3b0 [ 423.998539] ? lock_release+0xc8/0x290 [ 423.998556] ? __fget_files+0x20d/0x3b0 [ 423.998574] __sys_sendmsg+0x150/0x200 [ 423.998591] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.998615] ? __pfx_ksys_write+0x10/0x10 [ 423.998636] do_syscall_64+0xbf/0x360 [ 423.998649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.998663] RIP: 0033:0x7fc6ad49cb19 [ 423.998672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.998684] RSP: 002b:00007fc6aaa12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.998696] RAX: ffffffffffffffda RBX: 00007fc6ad5aff60 RCX: 00007fc6ad49cb19 [ 423.998704] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 423.998711] RBP: 00007fc6aaa121d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.998719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.998727] R13: 00007ffe20623e5f R14: 00007fc6aaa12300 R15: 0000000000022000 [ 423.998744] 05:55:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:55:37 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 3) 05:55:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 05:55:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) [ 424.121135] Bluetooth: Frame is too long (len 36, expected len 4) [ 424.128480] Bluetooth: hci4: connection err: -111 05:55:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x5}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:47 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 1) 05:55:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 4) 05:55:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 1) 05:55:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) [ 433.273396] FAULT_INJECTION: forcing a failure. [ 433.273396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.274431] CPU: 1 UID: 0 PID: 5403 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 433.274450] Tainted: [W]=WARN [ 433.274454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.274461] Call Trace: [ 433.274465] [ 433.274470] dump_stack_lvl+0xfa/0x120 [ 433.274494] should_fail_ex+0x4d7/0x5e0 [ 433.274512] _copy_from_user+0x30/0xd0 [ 433.274529] copy_msghdr_from_user+0x88/0x150 [ 433.274549] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 433.274569] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.274588] ? lock_acquire+0x15e/0x2f0 [ 433.274605] ___sys_sendmsg+0xdc/0x1b0 [ 433.274624] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.274641] ? perf_trace_lock+0xb5/0x5d0 [ 433.274657] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.274670] ? proc_fail_nth_write+0x97/0x220 [ 433.274688] ? lock_acquire+0x15e/0x2f0 [ 433.274701] ? __fget_files+0x34/0x3b0 [ 433.274714] ? find_held_lock+0x2b/0x80 [ 433.274731] ? __fget_files+0x203/0x3b0 [ 433.274743] ? lock_release+0xc8/0x290 [ 433.274759] ? __fget_files+0x20d/0x3b0 [ 433.274777] __sys_sendmsg+0x150/0x200 [ 433.274794] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.274815] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 433.274829] ? fput+0x6a/0x100 [ 433.274845] ? ksys_write+0x1a3/0x240 [ 433.274858] ? __pfx_ksys_write+0x10/0x10 [ 433.274877] do_syscall_64+0xbf/0x360 [ 433.274891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.274904] RIP: 0033:0x7f975f546b19 [ 433.274913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.274925] RSP: 002b:00007f975cabc188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.274938] RAX: ffffffffffffffda RBX: 00007f975f659f60 RCX: 00007f975f546b19 [ 433.274946] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000004 [ 433.274953] RBP: 00007f975cabc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.274961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.274968] R13: 00007ffed262ad0f R14: 00007f975cabc300 R15: 0000000000022000 [ 433.274985] [ 433.300866] Bluetooth: Frame is too long (len 36, expected len 4) [ 433.301653] Bluetooth: hci4: connection err: -111 05:55:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 2) [ 433.345365] FAULT_INJECTION: forcing a failure. [ 433.345365] name failslab, interval 1, probability 0, space 0, times 0 [ 433.346438] CPU: 1 UID: 0 PID: 5412 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 433.346457] Tainted: [W]=WARN [ 433.346461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.346468] Call Trace: [ 433.346472] [ 433.346477] dump_stack_lvl+0xfa/0x120 [ 433.346505] should_fail_ex+0x4d7/0x5e0 [ 433.346525] should_failslab+0xc2/0x120 [ 433.346541] kmem_cache_alloc_node_noprof+0x79/0x690 [ 433.346562] ? __is_insn_slot_addr+0x136/0x290 [ 433.346582] ? lock_release+0xc8/0x290 [ 433.346596] ? __alloc_skb+0x2ab/0x370 [ 433.346618] ? __alloc_skb+0x2ab/0x370 [ 433.346634] __alloc_skb+0x2ab/0x370 [ 433.346651] ? __pfx___alloc_skb+0x10/0x10 [ 433.346667] ? selinux_socket_getpeersec_dgram+0x236/0x360 [ 433.346685] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 433.346702] ? perf_trace_lock+0xb5/0x5d0 [ 433.346719] netlink_alloc_large_skb+0x69/0x150 [ 433.346741] netlink_sendmsg+0x676/0xd80 [ 433.346763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.346790] ____sys_sendmsg+0xa67/0xc20 [ 433.346806] ? copy_msghdr_from_user+0xfb/0x150 [ 433.346824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.346844] ? lock_acquire+0x15e/0x2f0 [ 433.346860] ___sys_sendmsg+0x10f/0x1b0 [ 433.346879] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.346896] ? perf_trace_lock+0xb5/0x5d0 [ 433.346913] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.346926] ? proc_fail_nth_write+0x97/0x220 [ 433.346943] ? lock_acquire+0x15e/0x2f0 [ 433.346956] ? __fget_files+0x34/0x3b0 [ 433.346969] ? find_held_lock+0x2b/0x80 [ 433.346987] ? __fget_files+0x203/0x3b0 [ 433.346999] ? lock_release+0xc8/0x290 [ 433.347015] ? __fget_files+0x20d/0x3b0 [ 433.347033] __sys_sendmsg+0x150/0x200 [ 433.347050] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.347074] ? __pfx_ksys_write+0x10/0x10 [ 433.347098] do_syscall_64+0xbf/0x360 [ 433.347112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.347125] RIP: 0033:0x7f975f546b19 [ 433.347134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.347146] RSP: 002b:00007f975cabc188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.347157] RAX: ffffffffffffffda RBX: 00007f975f659f60 RCX: 00007f975f546b19 [ 433.347166] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000004 [ 433.347173] RBP: 00007f975cabc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.347180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.347187] R13: 00007ffed262ad0f R14: 00007f975cabc300 R15: 0000000000022000 [ 433.347204] [ 433.377553] FAULT_INJECTION: forcing a failure. [ 433.377553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.378602] CPU: 1 UID: 0 PID: 5414 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 433.378621] Tainted: [W]=WARN [ 433.378625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.378631] Call Trace: [ 433.378635] [ 433.378640] dump_stack_lvl+0xfa/0x120 [ 433.378660] should_fail_ex+0x4d7/0x5e0 [ 433.378677] _copy_from_user+0x30/0xd0 [ 433.378694] copy_msghdr_from_user+0x88/0x150 [ 433.378712] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 433.378733] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.378750] ? lock_acquire+0x15e/0x2f0 [ 433.378766] ___sys_sendmsg+0xdc/0x1b0 [ 433.378784] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.378801] ? perf_trace_lock+0xb5/0x5d0 [ 433.378818] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.378832] ? proc_fail_nth_write+0x97/0x220 [ 433.378847] ? lock_acquire+0x15e/0x2f0 [ 433.378861] ? __fget_files+0x34/0x3b0 [ 433.378873] ? find_held_lock+0x2b/0x80 [ 433.378891] ? __fget_files+0x203/0x3b0 [ 433.378902] ? lock_release+0xc8/0x290 [ 433.378918] ? __fget_files+0x20d/0x3b0 [ 433.378936] __sys_sendmsg+0x150/0x200 [ 433.378953] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.378974] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 433.378988] ? fput+0x6a/0x100 [ 433.379004] ? ksys_write+0x1a3/0x240 [ 433.379016] ? __pfx_ksys_write+0x10/0x10 [ 433.379035] do_syscall_64+0xbf/0x360 [ 433.379048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.379060] RIP: 0033:0x7fca3dbf8b19 [ 433.379069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.379080] RSP: 002b:00007fca3b16e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.379096] RAX: ffffffffffffffda RBX: 00007fca3dd0bf60 RCX: 00007fca3dbf8b19 [ 433.379104] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 433.379111] RBP: 00007fca3b16e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.379119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.379126] R13: 00007fffa21a08df R14: 00007fca3b16e300 R15: 0000000000022000 [ 433.379143] 05:55:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 3) 05:55:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 5) 05:55:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8f}, @l2cap_cid_signaling={{0x8b}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:47 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 2) [ 433.577909] FAULT_INJECTION: forcing a failure. [ 433.577909] name failslab, interval 1, probability 0, space 0, times 0 [ 433.578877] CPU: 1 UID: 0 PID: 5431 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 433.578897] Tainted: [W]=WARN [ 433.578901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.578908] Call Trace: [ 433.578913] [ 433.578918] dump_stack_lvl+0xfa/0x120 [ 433.578943] should_fail_ex+0x4d7/0x5e0 [ 433.578963] should_failslab+0xc2/0x120 [ 433.578979] kmem_cache_alloc_node_noprof+0x79/0x690 [ 433.579000] ? __pfx_netlink_insert+0x10/0x10 [ 433.579020] ? __alloc_skb+0x2ab/0x370 [ 433.579040] ? find_held_lock+0x2b/0x80 [ 433.579062] ? __alloc_skb+0x2ab/0x370 [ 433.579078] __alloc_skb+0x2ab/0x370 [ 433.579098] ? __pfx___alloc_skb+0x10/0x10 [ 433.579117] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 433.579140] netlink_alloc_large_skb+0x69/0x150 [ 433.579160] netlink_sendmsg+0x676/0xd80 [ 433.579183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.579209] ____sys_sendmsg+0xa67/0xc20 [ 433.579225] ? copy_msghdr_from_user+0xfb/0x150 [ 433.579244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.579263] ? lock_acquire+0x15e/0x2f0 [ 433.579280] ___sys_sendmsg+0x10f/0x1b0 [ 433.579298] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.579315] ? perf_trace_lock+0xb5/0x5d0 [ 433.579333] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.579348] ? proc_fail_nth_write+0x97/0x220 [ 433.579368] ? lock_acquire+0x15e/0x2f0 [ 433.579381] ? __fget_files+0x34/0x3b0 [ 433.579394] ? find_held_lock+0x2b/0x80 [ 433.579411] ? __fget_files+0x203/0x3b0 [ 433.579423] ? lock_release+0xc8/0x290 [ 433.579439] ? __fget_files+0x20d/0x3b0 [ 433.579457] __sys_sendmsg+0x150/0x200 [ 433.579474] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.579498] ? __pfx_ksys_write+0x10/0x10 [ 433.579518] do_syscall_64+0xbf/0x360 [ 433.579532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.579545] RIP: 0033:0x7fca3dbf8b19 [ 433.579555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.579566] RSP: 002b:00007fca3b16e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.579578] RAX: ffffffffffffffda RBX: 00007fca3dd0bf60 RCX: 00007fca3dbf8b19 [ 433.579586] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 433.579593] RBP: 00007fca3b16e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.579600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.579607] R13: 00007fffa21a08df R14: 00007fca3b16e300 R15: 0000000000022000 [ 433.579625] [ 433.599376] Bluetooth: hci4: connection err: -111 05:55:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 6) 05:55:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) [ 433.683481] FAULT_INJECTION: forcing a failure. [ 433.683481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.684523] CPU: 1 UID: 0 PID: 5436 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 433.684542] Tainted: [W]=WARN [ 433.684546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 433.684553] Call Trace: [ 433.684557] [ 433.684562] dump_stack_lvl+0xfa/0x120 [ 433.684586] should_fail_ex+0x4d7/0x5e0 [ 433.684605] _copy_from_iter+0x1dc/0x1660 [ 433.684622] ? lock_acquire+0x15e/0x2f0 [ 433.684637] ? __virt_addr_valid+0x1c6/0x5d0 [ 433.684657] ? find_held_lock+0x2b/0x80 [ 433.684676] ? __pfx__copy_from_iter+0x10/0x10 [ 433.684690] ? lock_release+0xc8/0x290 [ 433.684706] ? __virt_addr_valid+0x100/0x5d0 [ 433.684726] ? __check_object_size+0x57b/0x880 [ 433.684750] netlink_sendmsg+0x809/0xd80 [ 433.684774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.684800] ____sys_sendmsg+0xa67/0xc20 [ 433.684816] ? copy_msghdr_from_user+0xfb/0x150 [ 433.684835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.684855] ? lock_acquire+0x15e/0x2f0 [ 433.684870] ___sys_sendmsg+0x10f/0x1b0 [ 433.684889] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.684906] ? perf_trace_lock+0xb5/0x5d0 [ 433.684923] ? __pfx_perf_trace_lock+0x10/0x10 [ 433.684937] ? proc_fail_nth_write+0x97/0x220 [ 433.684954] ? lock_acquire+0x15e/0x2f0 [ 433.684967] ? __fget_files+0x34/0x3b0 [ 433.684979] ? find_held_lock+0x2b/0x80 [ 433.684997] ? __fget_files+0x203/0x3b0 [ 433.685008] ? lock_release+0xc8/0x290 [ 433.685024] ? __fget_files+0x20d/0x3b0 [ 433.685042] __sys_sendmsg+0x150/0x200 [ 433.685060] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.685084] ? __pfx_ksys_write+0x10/0x10 [ 433.685109] do_syscall_64+0xbf/0x360 [ 433.685122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.685135] RIP: 0033:0x7fc6ad49cb19 [ 433.685144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.685156] RSP: 002b:00007fc6aaa12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.685167] RAX: ffffffffffffffda RBX: 00007fc6ad5aff60 RCX: 00007fc6ad49cb19 [ 433.685175] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 433.685182] RBP: 00007fc6aaa121d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.685189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.685196] R13: 00007ffe20623e5f R14: 00007fc6aaa12300 R15: 0000000000022000 [ 433.685213] 05:55:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8f}, @l2cap_cid_signaling={{0x8b}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:47 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) [ 433.825780] Bluetooth: hci4: connection err: -111 05:55:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 4) 05:55:57 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 7) 05:55:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 3) 05:55:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 05:55:57 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8f}, @l2cap_cid_signaling={{0x8b}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81, 0x67}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:55:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:55:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) [ 444.046350] FAULT_INJECTION: forcing a failure. [ 444.046350] name failslab, interval 1, probability 0, space 0, times 0 [ 444.047517] CPU: 1 UID: 0 PID: 5456 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 444.047537] Tainted: [W]=WARN [ 444.047541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 444.047548] Call Trace: [ 444.047552] [ 444.047557] dump_stack_lvl+0xfa/0x120 [ 444.047583] should_fail_ex+0x4d7/0x5e0 [ 444.047603] should_failslab+0xc2/0x120 [ 444.047620] kmem_cache_alloc_node_noprof+0x79/0x690 [ 444.047642] ? __alloc_skb+0x2ab/0x370 [ 444.047666] ? __alloc_skb+0x2ab/0x370 [ 444.047682] __alloc_skb+0x2ab/0x370 [ 444.047699] ? __pfx___alloc_skb+0x10/0x10 [ 444.047724] netlink_ack+0x167/0xbf0 [ 444.047744] ? __pfx___mutex_trylock_common+0x10/0x10 [ 444.047767] netlink_rcv_skb+0x344/0x430 [ 444.047786] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 444.047806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.047834] ? netlink_deliver_tap+0x1ae/0xce0 [ 444.047851] ? selinux_netlink_send+0x507/0x880 [ 444.047869] xfrm_netlink_rcv+0x74/0x90 [ 444.047884] netlink_unicast+0x5a7/0x870 [ 444.047906] ? __pfx_netlink_unicast+0x10/0x10 [ 444.047933] netlink_sendmsg+0x8ac/0xd80 [ 444.047955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.047982] ____sys_sendmsg+0xa67/0xc20 [ 444.047998] ? copy_msghdr_from_user+0xfb/0x150 [ 444.048016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.048036] ? lock_acquire+0x15e/0x2f0 [ 444.048053] ___sys_sendmsg+0x10f/0x1b0 [ 444.048072] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.048093] ? perf_trace_lock+0xb5/0x5d0 [ 444.048110] ? __pfx_perf_trace_lock+0x10/0x10 [ 444.048123] ? proc_fail_nth_write+0x97/0x220 [ 444.048141] ? lock_acquire+0x15e/0x2f0 [ 444.048154] ? __fget_files+0x34/0x3b0 [ 444.048167] ? find_held_lock+0x2b/0x80 [ 444.048185] ? __fget_files+0x203/0x3b0 [ 444.048196] ? lock_release+0xc8/0x290 [ 444.048213] ? __fget_files+0x20d/0x3b0 [ 444.048231] __sys_sendmsg+0x150/0x200 [ 444.048249] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.048273] ? __pfx_ksys_write+0x10/0x10 [ 444.048293] do_syscall_64+0xbf/0x360 [ 444.048307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.048320] RIP: 0033:0x7fc6ad49cb19 [ 444.048329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 444.048341] RSP: 002b:00007fc6aaa12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.048353] RAX: ffffffffffffffda RBX: 00007fc6ad5aff60 RCX: 00007fc6ad49cb19 [ 444.048361] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 444.048369] RBP: 00007fc6aaa121d0 R08: 0000000000000000 R09: 0000000000000000 [ 444.048376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.048383] R13: 00007ffe20623e5f R14: 00007fc6aaa12300 R15: 0000000000022000 [ 444.048402] [ 444.122667] Bluetooth: hci4: connection err: -111 05:56:06 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:56:06 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 4) 05:56:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 8) 05:56:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 5) 05:56:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:56:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:06 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 9) [ 453.063400] Bluetooth: Frame is too long (len 36, expected len 4) [ 453.073310] Bluetooth: hci4: connection err: -111 05:56:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:56:07 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{}, {0x400, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 5) 05:56:07 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 6) 05:56:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 10) [ 453.267733] Bluetooth: Frame is too long (len 36, expected len 4) [ 453.268615] Bluetooth: hci4: connection err: -111 05:56:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 05:56:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:07 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) [ 453.325367] FAULT_INJECTION: forcing a failure. [ 453.325367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.327238] CPU: 0 UID: 0 PID: 5511 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 453.327275] Tainted: [W]=WARN [ 453.327283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 453.327297] Call Trace: [ 453.327305] [ 453.327314] dump_stack_lvl+0xfa/0x120 [ 453.327360] should_fail_ex+0x4d7/0x5e0 [ 453.327396] _copy_from_iter+0x1dc/0x1660 [ 453.327428] ? lock_acquire+0x15e/0x2f0 [ 453.327456] ? __virt_addr_valid+0x1c6/0x5d0 [ 453.327494] ? find_held_lock+0x2b/0x80 [ 453.327532] ? __pfx__copy_from_iter+0x10/0x10 [ 453.327559] ? lock_release+0xc8/0x290 [ 453.327591] ? __virt_addr_valid+0x100/0x5d0 [ 453.327630] ? __check_object_size+0x57b/0x880 [ 453.327674] netlink_sendmsg+0x809/0xd80 [ 453.327720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.327772] ____sys_sendmsg+0xa67/0xc20 [ 453.327802] ? copy_msghdr_from_user+0xfb/0x150 [ 453.327838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.327884] ___sys_sendmsg+0x10f/0x1b0 [ 453.327921] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.327954] ? perf_trace_lock+0xb5/0x5d0 [ 453.327988] ? __pfx_perf_trace_lock+0x10/0x10 [ 453.328022] ? lock_acquire+0x15e/0x2f0 [ 453.328048] ? __fget_files+0x34/0x3b0 [ 453.328072] ? find_held_lock+0x2b/0x80 [ 453.328113] ? __fget_files+0x203/0x3b0 [ 453.328136] ? lock_release+0xc8/0x290 [ 453.328168] ? __fget_files+0x20d/0x3b0 [ 453.328203] __sys_sendmsg+0x150/0x200 [ 453.328238] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.328301] do_syscall_64+0xbf/0x360 [ 453.328326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.328351] RIP: 0033:0x7f975f546b19 [ 453.328369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 453.328391] RSP: 002b:00007f975cabc188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.328414] RAX: ffffffffffffffda RBX: 00007f975f659f60 RCX: 00007f975f546b19 [ 453.328429] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000004 [ 453.328444] RBP: 00007f975cabc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 453.328458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:56:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) [ 453.328471] R13: 00007ffed262ad0f R14: 00007f975cabc300 R15: 0000000000022000 [ 453.328506] 05:56:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 7) 05:56:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:17 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{}, {0x0, 0x4, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) (fail_nth: 11) 05:56:17 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 6) 05:56:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) [ 463.868519] FAULT_INJECTION: forcing a failure. [ 463.868519] name failslab, interval 1, probability 0, space 0, times 0 [ 463.870037] CPU: 1 UID: 0 PID: 5533 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 463.870062] Tainted: [W]=WARN [ 463.870067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.870076] Call Trace: [ 463.870082] [ 463.870093] dump_stack_lvl+0xfa/0x120 [ 463.870124] should_fail_ex+0x4d7/0x5e0 [ 463.870148] should_failslab+0xc2/0x120 [ 463.870168] __kmalloc_noprof+0xc8/0x6e0 [ 463.870192] ? __mutex_trylock_common+0xf9/0x260 [ 463.870212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 463.870238] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 463.870256] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 463.870280] genl_family_rcv_msg_doit+0xab/0x2f0 [ 463.870298] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.870319] ? __pfx_genl_get_cmd+0x10/0x10 [ 463.870334] ? __kernel_text_address+0xd/0x40 [ 463.870353] ? __pfx_netlbl_mgmt_version+0x10/0x10 [ 463.870372] ? __radix_tree_lookup+0x1f7/0x290 [ 463.870402] genl_rcv_msg+0x532/0x7e0 [ 463.870422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.870440] ? __pfx_netlbl_mgmt_version+0x10/0x10 [ 463.870466] netlink_rcv_skb+0x147/0x430 [ 463.870491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.870509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.870545] ? netlink_deliver_tap+0x1ae/0xce0 [ 463.870567] ? selinux_netlink_send+0x507/0x880 [ 463.870584] ? is_vmalloc_addr+0x86/0xa0 [ 463.870612] genl_rcv+0x28/0x40 [ 463.870626] netlink_unicast+0x5a7/0x870 [ 463.870655] ? __pfx_netlink_unicast+0x10/0x10 [ 463.870690] netlink_sendmsg+0x8ac/0xd80 [ 463.870731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.870766] ____sys_sendmsg+0xa67/0xc20 [ 463.870786] ? copy_msghdr_from_user+0xfb/0x150 [ 463.870810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.870836] ? lock_acquire+0x15e/0x2f0 [ 463.870858] ___sys_sendmsg+0x10f/0x1b0 [ 463.870883] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.870905] ? perf_trace_lock+0xb5/0x5d0 [ 463.870927] ? __pfx_perf_trace_lock+0x10/0x10 [ 463.870944] ? proc_fail_nth_write+0x97/0x220 [ 463.870966] ? lock_acquire+0x15e/0x2f0 [ 463.870983] ? __fget_files+0x34/0x3b0 [ 463.870999] ? find_held_lock+0x2b/0x80 [ 463.871022] ? __fget_files+0x203/0x3b0 [ 463.871037] ? lock_release+0xc8/0x290 [ 463.871058] ? __fget_files+0x20d/0x3b0 [ 463.871082] __sys_sendmsg+0x150/0x200 [ 463.871106] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.871138] ? __pfx_ksys_write+0x10/0x10 [ 463.871164] do_syscall_64+0xbf/0x360 [ 463.871181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.871197] RIP: 0033:0x7f975f546b19 [ 463.871209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.871224] RSP: 002b:00007f975cabc188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.871239] RAX: ffffffffffffffda RBX: 00007f975f659f60 RCX: 00007f975f546b19 [ 463.871249] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000004 [ 463.871258] RBP: 00007f975cabc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.871267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.871276] R13: 00007ffed262ad0f R14: 00007f975cabc300 R15: 0000000000022000 [ 463.871300] [ 463.892571] FAULT_INJECTION: forcing a failure. [ 463.892571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.910802] CPU: 0 UID: 0 PID: 5540 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 463.910841] Tainted: [W]=WARN [ 463.910848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.910861] Call Trace: [ 463.910869] [ 463.910878] dump_stack_lvl+0xfa/0x120 [ 463.910923] should_fail_ex+0x4d7/0x5e0 [ 463.910959] _copy_from_iter+0x1dc/0x1660 [ 463.910989] ? lock_acquire+0x15e/0x2f0 [ 463.911017] ? __virt_addr_valid+0x1c6/0x5d0 [ 463.911053] ? find_held_lock+0x2b/0x80 [ 463.911096] ? __pfx__copy_from_iter+0x10/0x10 [ 463.911122] ? lock_release+0xc8/0x290 [ 463.911152] ? __virt_addr_valid+0x100/0x5d0 [ 463.911188] ? __check_object_size+0x57b/0x880 [ 463.911230] netlink_sendmsg+0x809/0xd80 [ 463.911275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.911324] ____sys_sendmsg+0xa67/0xc20 [ 463.911353] ? copy_msghdr_from_user+0xfb/0x150 [ 463.911388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.911424] ? lock_acquire+0x15e/0x2f0 [ 463.911453] ___sys_sendmsg+0x10f/0x1b0 [ 463.911488] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.911519] ? perf_trace_lock+0xb5/0x5d0 [ 463.911551] ? __pfx_perf_trace_lock+0x10/0x10 [ 463.911575] ? proc_fail_nth_write+0x97/0x220 [ 463.911607] ? lock_acquire+0x15e/0x2f0 [ 463.911631] ? __fget_files+0x34/0x3b0 [ 463.911654] ? find_held_lock+0x2b/0x80 [ 463.911686] ? __fget_files+0x203/0x3b0 [ 463.911708] ? lock_release+0xc8/0x290 [ 463.911737] ? __fget_files+0x20d/0x3b0 [ 463.911770] __sys_sendmsg+0x150/0x200 [ 463.911803] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.911848] ? __pfx_ksys_write+0x10/0x10 [ 463.911883] do_syscall_64+0xbf/0x360 [ 463.911908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.911932] RIP: 0033:0x7fca3dbf8b19 [ 463.911950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.911971] RSP: 002b:00007fca3b16e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.911993] RAX: ffffffffffffffda RBX: 00007fca3dd0bf60 RCX: 00007fca3dbf8b19 [ 463.912008] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 463.912021] RBP: 00007fca3b16e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.912035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.912048] R13: 00007fffa21a08df R14: 00007fca3b16e300 R15: 0000000000022000 [ 463.912081] [ 463.948018] Bluetooth: Frame is too long (len 36, expected len 4) [ 463.954928] FAULT_INJECTION: forcing a failure. [ 463.954928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.956219] CPU: 1 UID: 0 PID: 5538 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 463.956243] Tainted: [W]=WARN [ 463.956248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.956257] Call Trace: [ 463.956262] [ 463.956268] dump_stack_lvl+0xfa/0x120 [ 463.956298] should_fail_ex+0x4d7/0x5e0 [ 463.956321] _copy_to_user+0x32/0xd0 [ 463.956343] simple_read_from_buffer+0xe0/0x180 [ 463.956370] proc_fail_nth_read+0x18a/0x240 [ 463.956388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.956406] ? security_file_permission+0x22/0x90 [ 463.956431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.956448] vfs_read+0x1eb/0xc70 [ 463.956468] ? __pfx_vfs_read+0x10/0x10 [ 463.956485] ? lock_release+0xc8/0x290 [ 463.956507] ? __fget_files+0x20d/0x3b0 [ 463.956531] ksys_read+0x121/0x240 [ 463.956546] ? __pfx_ksys_read+0x10/0x10 [ 463.956570] do_syscall_64+0xbf/0x360 [ 463.956586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.956603] RIP: 0033:0x7fc6ad44f69c [ 463.956614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 463.956628] RSP: 002b:00007fc6aaa12170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.956642] RAX: ffffffffffffffda RBX: 00000000000000b8 RCX: 00007fc6ad44f69c [ 463.956652] RDX: 000000000000000f RSI: 00007fc6aaa121e0 RDI: 0000000000000004 [ 463.956661] RBP: 00007fc6aaa121d0 R08: 0000000000000000 R09: 0000000000000000 [ 463.956670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.956679] R13: 00007ffe20623e5f R14: 00007fc6aaa12300 R15: 0000000000022000 [ 463.956701] [ 463.973045] Bluetooth: hci4: connection err: -111 05:56:17 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 05:56:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 8) 05:56:17 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:28 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 7) 05:56:28 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{}, {0x0, 0x0, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 9) 05:56:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) [ 474.206858] FAULT_INJECTION: forcing a failure. [ 474.206858] name failslab, interval 1, probability 0, space 0, times 0 [ 474.208850] CPU: 1 UID: 0 PID: 5570 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 474.208885] Tainted: [W]=WARN [ 474.208893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 474.208905] Call Trace: [ 474.208913] [ 474.208922] dump_stack_lvl+0xfa/0x120 [ 474.208967] should_fail_ex+0x4d7/0x5e0 [ 474.209002] should_failslab+0xc2/0x120 [ 474.209031] __kmalloc_cache_noprof+0x73/0x690 [ 474.209069] ? xfrm_policy_alloc+0x95/0x420 [ 474.209111] ? avc_has_perm_noaudit+0x150/0x3d0 [ 474.209154] ? xfrm_policy_alloc+0x95/0x420 [ 474.209186] xfrm_policy_alloc+0x95/0x420 [ 474.209223] xfrm_policy_construct+0x2f/0x550 [ 474.209261] xfrm_add_policy+0x282/0x5c0 [ 474.209296] ? __pfx_xfrm_add_policy+0x10/0x10 [ 474.209326] ? cap_capable+0xdb/0x3b0 [ 474.209364] ? __nla_parse+0x42/0x60 [ 474.209396] ? __pfx_xfrm_add_policy+0x10/0x10 [ 474.209427] xfrm_user_rcv_msg+0x459/0xa00 [ 474.209463] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 474.209493] ? __is_insn_slot_addr+0x136/0x290 [ 474.209529] ? lock_release+0xc8/0x290 [ 474.209560] ? __is_insn_slot_addr+0x140/0x290 [ 474.209634] ? __pfx___mutex_trylock_common+0x10/0x10 [ 474.209674] netlink_rcv_skb+0x147/0x430 [ 474.209711] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 474.209744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.209796] ? netlink_deliver_tap+0x1ae/0xce0 [ 474.209827] ? selinux_netlink_send+0x507/0x880 [ 474.209858] xfrm_netlink_rcv+0x74/0x90 [ 474.209886] netlink_unicast+0x5a7/0x870 [ 474.209926] ? __pfx_netlink_unicast+0x10/0x10 [ 474.209976] netlink_sendmsg+0x8ac/0xd80 [ 474.210017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.210067] ____sys_sendmsg+0xa67/0xc20 [ 474.210095] ? copy_msghdr_from_user+0xfb/0x150 [ 474.210129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.210166] ? lock_acquire+0x15e/0x2f0 [ 474.210196] ___sys_sendmsg+0x10f/0x1b0 [ 474.210230] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.210261] ? perf_trace_lock+0xb5/0x5d0 [ 474.210292] ? __pfx_perf_trace_lock+0x10/0x10 [ 474.210316] ? proc_fail_nth_write+0x97/0x220 [ 474.210347] ? lock_acquire+0x15e/0x2f0 [ 474.210371] ? __fget_files+0x34/0x3b0 [ 474.210393] ? find_held_lock+0x2b/0x80 [ 474.210425] ? __fget_files+0x203/0x3b0 [ 474.210447] ? lock_release+0xc8/0x290 [ 474.210476] ? __fget_files+0x20d/0x3b0 [ 474.210510] __sys_sendmsg+0x150/0x200 [ 474.210543] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.210588] ? __pfx_ksys_write+0x10/0x10 [ 474.210625] do_syscall_64+0xbf/0x360 [ 474.210649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.210672] RIP: 0033:0x7fca3dbf8b19 [ 474.210689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 474.210710] RSP: 002b:00007fca3b16e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.210731] RAX: ffffffffffffffda RBX: 00007fca3dd0bf60 RCX: 00007fca3dbf8b19 [ 474.210746] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 474.210759] RBP: 00007fca3b16e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 474.210772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.210785] R13: 00007fffa21a08df R14: 00007fca3b16e300 R15: 0000000000022000 [ 474.210818] [ 474.263219] FAULT_INJECTION: forcing a failure. [ 474.263219] name failslab, interval 1, probability 0, space 0, times 0 [ 474.264928] CPU: 1 UID: 0 PID: 5569 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 474.264962] Tainted: [W]=WARN [ 474.264969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 474.264981] Call Trace: [ 474.264988] [ 474.264996] dump_stack_lvl+0xfa/0x120 [ 474.265033] should_fail_ex+0x4d7/0x5e0 [ 474.265064] should_failslab+0xc2/0x120 [ 474.265096] kmem_cache_alloc_node_noprof+0x79/0x690 [ 474.265130] ? __asan_memset+0x24/0x50 [ 474.265155] ? __alloc_skb+0x2ab/0x370 [ 474.265194] ? __alloc_skb+0x2ab/0x370 [ 474.265223] __alloc_skb+0x2ab/0x370 [ 474.265254] ? __pfx___alloc_skb+0x10/0x10 [ 474.265289] ? __kasan_kmalloc+0x7f/0x90 [ 474.265318] ? trace_kmalloc+0x1f/0xb0 [ 474.265350] netlbl_mgmt_version+0x7f/0x350 [ 474.265374] ? __pfx_netlbl_mgmt_version+0x10/0x10 [ 474.265398] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 474.265423] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 474.265456] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 474.265482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 474.265521] ? __radix_tree_lookup+0x1f7/0x290 [ 474.265565] genl_rcv_msg+0x532/0x7e0 [ 474.265593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.265618] ? __pfx_netlbl_mgmt_version+0x10/0x10 [ 474.265654] netlink_rcv_skb+0x147/0x430 [ 474.265689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.265715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.265765] ? netlink_deliver_tap+0x1ae/0xce0 [ 474.265796] ? selinux_netlink_send+0x507/0x880 [ 474.265819] ? is_vmalloc_addr+0x86/0xa0 [ 474.265858] genl_rcv+0x28/0x40 [ 474.265877] netlink_unicast+0x5a7/0x870 [ 474.265917] ? __pfx_netlink_unicast+0x10/0x10 [ 474.265967] netlink_sendmsg+0x8ac/0xd80 [ 474.266008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.266058] ____sys_sendmsg+0xa67/0xc20 [ 474.266084] ? copy_msghdr_from_user+0xfb/0x150 [ 474.266118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.266154] ? lock_acquire+0x15e/0x2f0 [ 474.266184] ___sys_sendmsg+0x10f/0x1b0 [ 474.266218] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.266249] ? perf_trace_lock+0xb5/0x5d0 [ 474.266280] ? __pfx_perf_trace_lock+0x10/0x10 [ 474.266304] ? proc_fail_nth_write+0x97/0x220 [ 474.266333] ? lock_acquire+0x15e/0x2f0 [ 474.266357] ? __fget_files+0x34/0x3b0 [ 474.266378] ? find_held_lock+0x2b/0x80 [ 474.266410] ? __fget_files+0x203/0x3b0 [ 474.266431] ? lock_release+0xc8/0x290 [ 474.266461] ? __fget_files+0x20d/0x3b0 [ 474.266495] __sys_sendmsg+0x150/0x200 [ 474.266528] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.266573] ? __pfx_ksys_write+0x10/0x10 [ 474.266608] do_syscall_64+0xbf/0x360 [ 474.266632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.266653] RIP: 0033:0x7f975f546b19 [ 474.266670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 474.266690] RSP: 002b:00007f975cabc188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.266710] RAX: ffffffffffffffda RBX: 00007f975f659f60 RCX: 00007f975f546b19 [ 474.266725] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000004 [ 474.266738] RBP: 00007f975cabc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 474.266751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.266764] R13: 00007ffed262ad0f R14: 00007f975cabc300 R15: 0000000000022000 [ 474.266797] [ 474.268468] Bluetooth: Frame is too long (len 36, expected len 4) [ 474.318663] Bluetooth: hci4: connection err: -111 05:56:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 8) 05:56:37 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 10) 05:56:37 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{}, {0x0, 0x0, 0xfa}}, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 05:56:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) [ 484.119797] Bluetooth: Frame is too long (len 36, expected len 4) [ 484.121265] Bluetooth: hci4: connection err: -111 05:56:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 11) 05:56:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x81}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 484.217410] Bluetooth: Frame is too long (len 36, expected len 4) [ 484.219371] Bluetooth: hci4: connection err: -111 05:56:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 12) 05:56:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 9) 05:56:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 484.322298] Bluetooth: hci4: connection err: -111 [ 484.365926] FAULT_INJECTION: forcing a failure. [ 484.365926] name failslab, interval 1, probability 0, space 0, times 0 [ 484.368073] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 484.368118] Tainted: [W]=WARN [ 484.368125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.368139] Call Trace: [ 484.368147] [ 484.368157] dump_stack_lvl+0xfa/0x120 [ 484.368203] should_fail_ex+0x4d7/0x5e0 [ 484.368233] ? ____sys_sendmsg+0xa67/0xc20 [ 484.368266] should_failslab+0xc2/0x120 [ 484.368297] kmem_cache_alloc_node_noprof+0x79/0x690 [ 484.368339] ? __alloc_skb+0x2ab/0x370 [ 484.368382] ? __alloc_skb+0x2ab/0x370 [ 484.368413] __alloc_skb+0x2ab/0x370 [ 484.368447] ? __pfx___alloc_skb+0x10/0x10 [ 484.368485] ? __lock_acquire+0x694/0x1b70 [ 484.368522] xfrm_send_policy_notify+0x209/0x1810 [ 484.368569] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 484.368609] ? xfrm_policy_kill+0x281/0x3e0 [ 484.368638] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 484.368677] km_policy_notify+0xb3/0x240 [ 484.368715] xfrm_add_policy+0x42e/0x5c0 [ 484.368751] ? __pfx_xfrm_add_policy+0x10/0x10 [ 484.368783] ? cap_capable+0xdb/0x3b0 [ 484.368824] ? __nla_parse+0x42/0x60 [ 484.368858] ? __pfx_xfrm_add_policy+0x10/0x10 [ 484.368892] xfrm_user_rcv_msg+0x459/0xa00 [ 484.368931] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 484.368963] ? __is_insn_slot_addr+0x136/0x290 [ 484.369002] ? lock_release+0xc8/0x290 [ 484.369034] ? __is_insn_slot_addr+0x140/0x290 [ 484.369114] ? __pfx___mutex_trylock_common+0x10/0x10 [ 484.369157] netlink_rcv_skb+0x147/0x430 [ 484.369196] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 484.369232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.369288] ? netlink_deliver_tap+0x1ae/0xce0 [ 484.369321] ? selinux_netlink_send+0x507/0x880 [ 484.369354] xfrm_netlink_rcv+0x74/0x90 [ 484.369385] netlink_unicast+0x5a7/0x870 [ 484.369428] ? __pfx_netlink_unicast+0x10/0x10 [ 484.369481] netlink_sendmsg+0x8ac/0xd80 [ 484.369526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.369579] ____sys_sendmsg+0xa67/0xc20 [ 484.369608] ? copy_msghdr_from_user+0xfb/0x150 [ 484.369644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.369684] ? lock_acquire+0x15e/0x2f0 [ 484.369716] ___sys_sendmsg+0x10f/0x1b0 [ 484.369753] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.369786] ? perf_trace_lock+0xb5/0x5d0 [ 484.369820] ? __pfx_perf_trace_lock+0x10/0x10 [ 484.369846] ? proc_fail_nth_write+0x97/0x220 [ 484.369879] ? lock_acquire+0x15e/0x2f0 [ 484.369905] ? __fget_files+0x34/0x3b0 [ 484.369930] ? find_held_lock+0x2b/0x80 [ 484.369964] ? __fget_files+0x203/0x3b0 [ 484.369987] ? lock_release+0xc8/0x290 [ 484.370019] ? __fget_files+0x20d/0x3b0 [ 484.370056] __sys_sendmsg+0x150/0x200 [ 484.370091] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.370140] ? __pfx_ksys_write+0x10/0x10 [ 484.370179] do_syscall_64+0xbf/0x360 [ 484.370205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.370230] RIP: 0033:0x7fca3dbf8b19 [ 484.370248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.370270] RSP: 002b:00007fca3b16e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.370293] RAX: ffffffffffffffda RBX: 00007fca3dd0bf60 RCX: 00007fca3dbf8b19 [ 484.370309] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 484.370323] RBP: 00007fca3b16e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 484.370337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.370351] R13: 00007fffa21a08df R14: 00007fca3b16e300 R15: 0000000000022000 [ 484.370387] 05:56:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 10) 05:56:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 1) 05:56:46 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:46 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 1) 05:56:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 05:56:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 13) 05:56:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 14) [ 493.045324] Bluetooth: hci4: connection err: -111 05:56:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 1) [ 493.071833] FAULT_INJECTION: forcing a failure. [ 493.071833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.073819] CPU: 1 UID: 0 PID: 5644 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 493.073857] Tainted: [W]=WARN [ 493.073864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.073877] Call Trace: [ 493.073885] [ 493.073894] dump_stack_lvl+0xfa/0x120 [ 493.073938] should_fail_ex+0x4d7/0x5e0 [ 493.073973] _copy_from_user+0x30/0xd0 [ 493.074006] copy_msghdr_from_user+0x88/0x150 [ 493.074044] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 493.074065] FAULT_INJECTION: forcing a failure. [ 493.074065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.074092] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.074128] ? lock_acquire+0x15e/0x2f0 [ 493.074161] ___sys_sendmsg+0xdc/0x1b0 [ 493.074197] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.074231] ? perf_trace_lock+0xb5/0x5d0 [ 493.074264] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.074290] ? proc_fail_nth_write+0x97/0x220 [ 493.074322] ? lock_acquire+0x15e/0x2f0 [ 493.074348] ? __fget_files+0x34/0x3b0 [ 493.074372] ? find_held_lock+0x2b/0x80 [ 493.074406] ? __fget_files+0x203/0x3b0 [ 493.074429] ? lock_release+0xc8/0x290 [ 493.074461] ? __fget_files+0x20d/0x3b0 [ 493.074496] __sys_sendmsg+0x150/0x200 [ 493.074532] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.074574] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 493.074600] ? fput+0x6a/0x100 [ 493.074631] ? ksys_write+0x1a3/0x240 [ 493.074657] ? __pfx_ksys_write+0x10/0x10 [ 493.074694] do_syscall_64+0xbf/0x360 [ 493.074720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.074744] RIP: 0033:0x7f6f6911eb19 [ 493.074762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.074784] RSP: 002b:00007f6f66694188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.074807] RAX: ffffffffffffffda RBX: 00007f6f69231f60 RCX: 00007f6f6911eb19 [ 493.074823] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 493.074837] RBP: 00007f6f666941d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.074851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.074865] R13: 00007ffc687abe2f R14: 00007f6f66694300 R15: 0000000000022000 [ 493.074899] [ 493.092599] CPU: 0 UID: 0 PID: 5647 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 493.092618] Tainted: [W]=WARN [ 493.092622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.092628] Call Trace: [ 493.092632] [ 493.092636] dump_stack_lvl+0xfa/0x120 [ 493.092656] should_fail_ex+0x4d7/0x5e0 [ 493.092673] _copy_from_user+0x30/0xd0 [ 493.092689] copy_msghdr_from_user+0x88/0x150 [ 493.092707] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 493.092727] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.092744] ? lock_acquire+0x15e/0x2f0 [ 493.092761] ___sys_sendmsg+0xdc/0x1b0 [ 493.092779] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.092796] ? perf_trace_lock+0xb5/0x5d0 [ 493.092812] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.092826] ? proc_fail_nth_write+0x97/0x220 [ 493.092841] ? lock_acquire+0x15e/0x2f0 [ 493.092854] ? __fget_files+0x34/0x3b0 [ 493.092866] ? find_held_lock+0x2b/0x80 [ 493.092883] ? __fget_files+0x203/0x3b0 [ 493.092894] ? lock_release+0xc8/0x290 [ 493.092910] ? __fget_files+0x20d/0x3b0 [ 493.092928] __sys_sendmsg+0x150/0x200 [ 493.092946] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.092966] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 493.092978] ? fput+0x6a/0x100 [ 493.092994] ? ksys_write+0x1a3/0x240 [ 493.093006] ? __pfx_ksys_write+0x10/0x10 [ 493.093025] do_syscall_64+0xbf/0x360 [ 493.093038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.093049] RIP: 0033:0x7fd1a19b0b19 [ 493.093058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.093070] RSP: 002b:00007fd19ef26188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.093081] RAX: ffffffffffffffda RBX: 00007fd1a1ac3f60 RCX: 00007fd1a19b0b19 [ 493.093093] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 493.093100] RBP: 00007fd19ef261d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.093107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.093114] R13: 00007ffc9938f10f R14: 00007fd19ef26300 R15: 0000000000022000 [ 493.093132] 05:56:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 11) 05:56:47 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 493.172195] FAULT_INJECTION: forcing a failure. [ 493.172195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.174302] CPU: 1 UID: 0 PID: 5653 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 493.174339] Tainted: [W]=WARN [ 493.174347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.174361] Call Trace: [ 493.174368] [ 493.174377] dump_stack_lvl+0xfa/0x120 [ 493.174421] should_fail_ex+0x4d7/0x5e0 [ 493.174457] _copy_from_user+0x30/0xd0 [ 493.174491] copy_msghdr_from_user+0x88/0x150 [ 493.174529] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 493.174569] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.174605] ? lock_acquire+0x15e/0x2f0 [ 493.174638] ___sys_sendmsg+0xdc/0x1b0 [ 493.174675] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.174708] ? perf_trace_lock+0xb5/0x5d0 [ 493.174741] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.174768] ? proc_fail_nth_write+0x97/0x220 [ 493.174801] ? lock_acquire+0x15e/0x2f0 [ 493.174826] ? __fget_files+0x34/0x3b0 [ 493.174850] ? find_held_lock+0x2b/0x80 [ 493.174885] ? __fget_files+0x203/0x3b0 [ 493.174908] ? lock_release+0xc8/0x290 [ 493.174939] ? __fget_files+0x20d/0x3b0 [ 493.174975] __sys_sendmsg+0x150/0x200 [ 493.175011] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.175051] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 493.175093] ? fput+0x6a/0x100 [ 493.175128] ? ksys_write+0x1a3/0x240 [ 493.175154] ? __pfx_ksys_write+0x10/0x10 [ 493.175191] do_syscall_64+0xbf/0x360 [ 493.175217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.175241] RIP: 0033:0x7fea4635db19 [ 493.175259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.175281] RSP: 002b:00007fea438d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.175305] RAX: ffffffffffffffda RBX: 00007fea46470f60 RCX: 00007fea4635db19 [ 493.175320] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 493.175335] RBP: 00007fea438d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.175349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.175363] R13: 00007ffdae6859df R14: 00007fea438d3300 R15: 0000000000022000 [ 493.175398] 05:56:47 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 2) 05:56:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 2) 05:56:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) [ 493.275164] Bluetooth: hci4: connection err: -111 05:56:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 15) [ 493.330923] FAULT_INJECTION: forcing a failure. [ 493.330923] name failslab, interval 1, probability 0, space 0, times 0 [ 493.332652] CPU: 1 UID: 0 PID: 5661 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 493.332687] Tainted: [W]=WARN [ 493.332694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.332707] Call Trace: [ 493.332715] [ 493.332723] dump_stack_lvl+0xfa/0x120 [ 493.332765] should_fail_ex+0x4d7/0x5e0 [ 493.332799] should_failslab+0xc2/0x120 [ 493.332828] kmem_cache_alloc_node_noprof+0x79/0x690 [ 493.332864] ? __pfx_netlink_insert+0x10/0x10 [ 493.332899] ? __alloc_skb+0x2ab/0x370 [ 493.332931] ? find_held_lock+0x2b/0x80 [ 493.332970] ? __alloc_skb+0x2ab/0x370 [ 493.333002] __alloc_skb+0x2ab/0x370 [ 493.333035] ? __pfx___alloc_skb+0x10/0x10 [ 493.333071] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 493.333120] netlink_alloc_large_skb+0x69/0x150 [ 493.333157] netlink_sendmsg+0x676/0xd80 [ 493.333199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.333248] ____sys_sendmsg+0xa67/0xc20 [ 493.333276] ? copy_msghdr_from_user+0xfb/0x150 [ 493.333310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.333346] ? lock_acquire+0x15e/0x2f0 [ 493.333376] ___sys_sendmsg+0x10f/0x1b0 [ 493.333410] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.333441] ? perf_trace_lock+0xb5/0x5d0 [ 493.333473] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.333497] ? proc_fail_nth_write+0x97/0x220 [ 493.333529] ? lock_acquire+0x15e/0x2f0 [ 493.333553] ? __fget_files+0x34/0x3b0 [ 493.333575] ? find_held_lock+0x2b/0x80 [ 493.333607] ? __fget_files+0x203/0x3b0 [ 493.333629] ? lock_release+0xc8/0x290 [ 493.333659] ? __fget_files+0x20d/0x3b0 [ 493.333692] __sys_sendmsg+0x150/0x200 [ 493.333725] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.333769] ? __pfx_ksys_write+0x10/0x10 [ 493.333805] do_syscall_64+0xbf/0x360 [ 493.333829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.333853] RIP: 0033:0x7fd1a19b0b19 [ 493.333870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.333891] RSP: 002b:00007fd19ef26188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.333913] RAX: ffffffffffffffda RBX: 00007fd1a1ac3f60 RCX: 00007fd1a19b0b19 [ 493.333927] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 493.333940] RBP: 00007fd19ef261d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.333954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.333967] R13: 00007ffc9938f10f R14: 00007fd19ef26300 R15: 0000000000022000 [ 493.334000] [ 493.373712] FAULT_INJECTION: forcing a failure. [ 493.373712] name failslab, interval 1, probability 0, space 0, times 0 [ 493.375350] CPU: 1 UID: 0 PID: 5662 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 493.375384] Tainted: [W]=WARN [ 493.375391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.375402] Call Trace: [ 493.375410] [ 493.375418] dump_stack_lvl+0xfa/0x120 [ 493.375454] should_fail_ex+0x4d7/0x5e0 [ 493.375485] should_failslab+0xc2/0x120 [ 493.375511] kmem_cache_alloc_node_noprof+0x79/0x690 [ 493.375546] ? __pfx_netlink_insert+0x10/0x10 [ 493.375579] ? __alloc_skb+0x2ab/0x370 [ 493.375609] ? find_held_lock+0x2b/0x80 [ 493.375646] ? __alloc_skb+0x2ab/0x370 [ 493.375676] __alloc_skb+0x2ab/0x370 [ 493.375711] ? __pfx___alloc_skb+0x10/0x10 [ 493.375750] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 493.375792] netlink_alloc_large_skb+0x69/0x150 [ 493.375829] netlink_sendmsg+0x676/0xd80 [ 493.375870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.375919] ____sys_sendmsg+0xa67/0xc20 [ 493.375946] ? copy_msghdr_from_user+0xfb/0x150 [ 493.375980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.376016] ? lock_acquire+0x15e/0x2f0 [ 493.376046] ___sys_sendmsg+0x10f/0x1b0 [ 493.376081] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.376120] ? perf_trace_lock+0xb5/0x5d0 [ 493.376150] ? __pfx_perf_trace_lock+0x10/0x10 [ 493.376175] ? proc_fail_nth_write+0x97/0x220 [ 493.376204] ? lock_acquire+0x15e/0x2f0 [ 493.376228] ? __fget_files+0x34/0x3b0 [ 493.376249] ? find_held_lock+0x2b/0x80 [ 493.376282] ? __fget_files+0x203/0x3b0 [ 493.376304] ? lock_release+0xc8/0x290 [ 493.376334] ? __fget_files+0x20d/0x3b0 [ 493.376367] __sys_sendmsg+0x150/0x200 [ 493.376400] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.376445] ? __pfx_ksys_write+0x10/0x10 [ 493.376479] do_syscall_64+0xbf/0x360 [ 493.376503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.376526] RIP: 0033:0x7f6f6911eb19 [ 493.376543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.376563] RSP: 002b:00007f6f66694188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.376584] RAX: ffffffffffffffda RBX: 00007f6f69231f60 RCX: 00007f6f6911eb19 [ 493.376598] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 493.376612] RBP: 00007f6f666941d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.376625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.376638] R13: 00007ffc687abe2f R14: 00007f6f66694300 R15: 0000000000022000 [ 493.376671] [ 493.476190] FAULT_INJECTION: forcing a failure. [ 493.476190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.478165] CPU: 0 UID: 0 PID: 5667 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 493.478202] Tainted: [W]=WARN [ 493.478209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.478222] Call Trace: [ 493.478230] [ 493.478238] dump_stack_lvl+0xfa/0x120 [ 493.478282] should_fail_ex+0x4d7/0x5e0 [ 493.478316] _copy_to_user+0x32/0xd0 [ 493.478348] simple_read_from_buffer+0xe0/0x180 [ 493.478389] proc_fail_nth_read+0x18a/0x240 [ 493.478417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.478450] ? security_file_permission+0x22/0x90 [ 493.478506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.478533] vfs_read+0x1eb/0xc70 [ 493.478564] ? __pfx_vfs_read+0x10/0x10 [ 493.478589] ? lock_release+0xc8/0x290 [ 493.478621] ? __fget_files+0x20d/0x3b0 [ 493.478656] ksys_read+0x121/0x240 [ 493.478679] ? __pfx_ksys_read+0x10/0x10 [ 493.478713] do_syscall_64+0xbf/0x360 [ 493.478738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.478761] RIP: 0033:0x7f975f4f969c [ 493.478779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 493.478800] RSP: 002b:00007f975cabc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.478821] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f975f4f969c [ 493.478836] RDX: 000000000000000f RSI: 00007f975cabc1e0 RDI: 0000000000000003 [ 493.478849] RBP: 00007f975cabc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.478863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.478876] R13: 00007ffed262ad0f R14: 00007f975cabc300 R15: 0000000000022000 [ 493.478909] 05:56:56 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:56:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 3) 05:56:56 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 3) 05:56:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 1) 05:56:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 2) 05:56:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 12) 05:56:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:56:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 4) [ 502.255423] FAULT_INJECTION: forcing a failure. [ 502.255423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.257847] CPU: 0 UID: 0 PID: 5680 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 502.257893] Tainted: [W]=WARN [ 502.257903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 502.257919] Call Trace: [ 502.257929] [ 502.257941] dump_stack_lvl+0xfa/0x120 [ 502.257995] should_fail_ex+0x4d7/0x5e0 [ 502.258039] _copy_from_user+0x30/0xd0 [ 502.258079] copy_msghdr_from_user+0x88/0x150 [ 502.258136] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 502.258187] ? __pfx_perf_trace_lock+0x10/0x10 [ 502.258232] ? lock_acquire+0x15e/0x2f0 [ 502.258272] ___sys_sendmsg+0xdc/0x1b0 [ 502.258318] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.258360] ? perf_trace_lock+0xb5/0x5d0 [ 502.258401] ? __pfx_perf_trace_lock+0x10/0x10 [ 502.258434] ? proc_fail_nth_write+0x97/0x220 [ 502.258474] ? lock_acquire+0x15e/0x2f0 [ 502.258507] ? __fget_files+0x34/0x3b0 [ 502.258536] ? find_held_lock+0x2b/0x80 [ 502.258580] ? __fget_files+0x203/0x3b0 [ 502.258608] ? lock_release+0xc8/0x290 [ 502.258648] ? __fget_files+0x20d/0x3b0 [ 502.258693] __sys_sendmsg+0x150/0x200 [ 502.258737] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.258788] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 502.258821] ? fput+0x6a/0x100 [ 502.258862] ? ksys_write+0x1a3/0x240 [ 502.258893] ? __pfx_ksys_write+0x10/0x10 [ 502.258940] do_syscall_64+0xbf/0x360 [ 502.258972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.259003] RIP: 0033:0x7f9f1f48ab19 [ 502.259026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.259053] RSP: 002b:00007f9f1ca00188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.259082] RAX: ffffffffffffffda RBX: 00007f9f1f59df60 RCX: 00007f9f1f48ab19 [ 502.259102] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 502.259120] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.259137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.259155] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 502.259215] [ 502.304758] Bluetooth: Frame is too long (len 36, expected len 4) [ 502.313699] Bluetooth: hci4: connection err: -111 [ 502.329008] FAULT_INJECTION: forcing a failure. [ 502.329008] name failslab, interval 1, probability 0, space 0, times 0 [ 502.331255] CPU: 0 UID: 0 PID: 5690 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 502.331294] Tainted: [W]=WARN [ 502.331302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 502.331317] Call Trace: [ 502.331325] [ 502.331334] dump_stack_lvl+0xfa/0x120 [ 502.331383] should_fail_ex+0x4d7/0x5e0 [ 502.331419] should_failslab+0xc2/0x120 [ 502.331451] kmem_cache_alloc_node_noprof+0x79/0x690 [ 502.331491] ? __pfx_netlink_insert+0x10/0x10 [ 502.331530] ? __alloc_skb+0x2ab/0x370 [ 502.331565] ? find_held_lock+0x2b/0x80 [ 502.331608] ? __alloc_skb+0x2ab/0x370 [ 502.331641] __alloc_skb+0x2ab/0x370 [ 502.331676] ? __pfx___alloc_skb+0x10/0x10 [ 502.331717] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 502.331764] netlink_alloc_large_skb+0x69/0x150 [ 502.331805] netlink_sendmsg+0x676/0xd80 [ 502.331852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.331907] ____sys_sendmsg+0xa67/0xc20 [ 502.331938] ? copy_msghdr_from_user+0xfb/0x150 [ 502.331976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.332017] ? lock_acquire+0x15e/0x2f0 [ 502.332050] ___sys_sendmsg+0x10f/0x1b0 [ 502.332097] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.332132] ? perf_trace_lock+0xb5/0x5d0 [ 502.332168] ? __pfx_perf_trace_lock+0x10/0x10 [ 502.332195] ? proc_fail_nth_write+0x97/0x220 [ 502.332229] ? lock_acquire+0x15e/0x2f0 [ 502.332256] ? __fget_files+0x34/0x3b0 [ 502.332281] ? find_held_lock+0x2b/0x80 [ 502.332317] ? __fget_files+0x203/0x3b0 [ 502.332341] ? lock_release+0xc8/0x290 [ 502.332374] ? __fget_files+0x20d/0x3b0 [ 502.332412] __sys_sendmsg+0x150/0x200 [ 502.332449] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.332499] ? __pfx_ksys_write+0x10/0x10 [ 502.332539] do_syscall_64+0xbf/0x360 [ 502.332566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.332592] RIP: 0033:0x7fea4635db19 [ 502.332612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.332634] RSP: 002b:00007fea438d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.332659] RAX: ffffffffffffffda RBX: 00007fea46470f60 RCX: 00007fea4635db19 [ 502.332675] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 502.332690] RBP: 00007fea438d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.332705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.332719] R13: 00007ffdae6859df R14: 00007fea438d3300 R15: 0000000000022000 [ 502.332755] 05:56:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 13) 05:56:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 5) 05:56:56 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 502.450900] FAULT_INJECTION: forcing a failure. [ 502.450900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.451901] CPU: 1 UID: 0 PID: 5698 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 502.451923] Tainted: [W]=WARN [ 502.451927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 502.451935] Call Trace: [ 502.451940] [ 502.451945] dump_stack_lvl+0xfa/0x120 [ 502.451970] should_fail_ex+0x4d7/0x5e0 [ 502.451990] _copy_to_user+0x32/0xd0 [ 502.452008] simple_read_from_buffer+0xe0/0x180 [ 502.452037] proc_fail_nth_read+0x18a/0x240 [ 502.452053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.452067] ? security_file_permission+0x22/0x90 05:56:56 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 4) [ 502.452089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.452102] vfs_read+0x1eb/0xc70 [ 502.452120] ? __pfx_vfs_read+0x10/0x10 [ 502.452134] ? lock_release+0xc8/0x290 [ 502.452152] ? __fget_files+0x20d/0x3b0 [ 502.452172] ksys_read+0x121/0x240 [ 502.452185] ? __pfx_ksys_read+0x10/0x10 [ 502.452204] do_syscall_64+0xbf/0x360 [ 502.452217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.452230] RIP: 0033:0x7fca3dbab69c [ 502.452240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 502.452251] RSP: 002b:00007fca3b16e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.452263] RAX: ffffffffffffffda RBX: 00000000000000b8 RCX: 00007fca3dbab69c [ 502.452271] RDX: 000000000000000f RSI: 00007fca3b16e1e0 RDI: 0000000000000004 [ 502.452278] RBP: 00007fca3b16e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.452286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.452293] R13: 00007fffa21a08df R14: 00007fca3b16e300 R15: 0000000000022000 [ 502.452310] 05:56:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 2) 05:56:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 502.498502] Bluetooth: Frame is too long (len 36, expected len 4) [ 502.501073] Bluetooth: hci4: connection err: -111 [ 502.516314] FAULT_INJECTION: forcing a failure. [ 502.516314] name failslab, interval 1, probability 0, space 0, times 0 [ 502.517256] CPU: 1 UID: 0 PID: 5706 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 502.517276] Tainted: [W]=WARN [ 502.517280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 502.517287] Call Trace: [ 502.517291] [ 502.517296] dump_stack_lvl+0xfa/0x120 [ 502.517320] should_fail_ex+0x4d7/0x5e0 [ 502.517338] should_failslab+0xc2/0x120 [ 502.517355] kmem_cache_alloc_node_noprof+0x79/0x690 [ 502.517375] ? __pfx_netlink_insert+0x10/0x10 [ 502.517395] ? __alloc_skb+0x2ab/0x370 [ 502.517414] ? find_held_lock+0x2b/0x80 [ 502.517436] ? __alloc_skb+0x2ab/0x370 [ 502.517452] __alloc_skb+0x2ab/0x370 [ 502.517469] ? __pfx___alloc_skb+0x10/0x10 [ 502.517488] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 502.517511] netlink_alloc_large_skb+0x69/0x150 [ 502.517531] netlink_sendmsg+0x676/0xd80 [ 502.517554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.517580] ____sys_sendmsg+0xa67/0xc20 [ 502.517596] ? copy_msghdr_from_user+0xfb/0x150 [ 502.517615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.517635] ? lock_acquire+0x15e/0x2f0 [ 502.517651] ___sys_sendmsg+0x10f/0x1b0 [ 502.517670] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.517687] ? perf_trace_lock+0xb5/0x5d0 [ 502.517704] ? __pfx_perf_trace_lock+0x10/0x10 [ 502.517718] ? proc_fail_nth_write+0x97/0x220 [ 502.517734] ? lock_acquire+0x15e/0x2f0 [ 502.517748] ? __fget_files+0x34/0x3b0 [ 502.517760] ? find_held_lock+0x2b/0x80 [ 502.517778] ? __fget_files+0x203/0x3b0 [ 502.517789] ? lock_release+0xc8/0x290 [ 502.517806] ? __fget_files+0x20d/0x3b0 [ 502.517824] __sys_sendmsg+0x150/0x200 [ 502.517841] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.517865] ? __pfx_ksys_write+0x10/0x10 [ 502.517885] do_syscall_64+0xbf/0x360 [ 502.517899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.517912] RIP: 0033:0x7f9f1f48ab19 [ 502.517921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.517932] RSP: 002b:00007f9f1ca00188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.517944] RAX: ffffffffffffffda RBX: 00007f9f1f59df60 RCX: 00007f9f1f48ab19 [ 502.517952] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 502.517959] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.517966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.517973] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 502.517990] 05:56:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 3) 05:56:56 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 5) 05:56:56 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x101, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 502.644639] Bluetooth: Frame is too long (len 36, expected len 4) [ 502.646197] Bluetooth: hci4: connection err: -111 05:57:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x2, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:05 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 4) 05:57:05 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 6) 05:57:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 6) 05:57:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 3) 05:57:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xae, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 511.295750] FAULT_INJECTION: forcing a failure. [ 511.295750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.296759] CPU: 1 UID: 0 PID: 5732 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 511.296778] Tainted: [W]=WARN [ 511.296782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.296790] Call Trace: [ 511.296795] [ 511.296800] dump_stack_lvl+0xfa/0x120 [ 511.296826] should_fail_ex+0x4d7/0x5e0 [ 511.296847] _copy_from_iter+0x1dc/0x1660 [ 511.296865] ? lock_acquire+0x15e/0x2f0 [ 511.296880] ? __virt_addr_valid+0x1c6/0x5d0 [ 511.296901] ? find_held_lock+0x2b/0x80 [ 511.296920] ? __pfx__copy_from_iter+0x10/0x10 [ 511.296934] ? lock_release+0xc8/0x290 [ 511.296951] ? __virt_addr_valid+0x100/0x5d0 [ 511.296970] ? __check_object_size+0x57b/0x880 [ 511.296994] netlink_sendmsg+0x809/0xd80 [ 511.297019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.297045] ____sys_sendmsg+0xa67/0xc20 [ 511.297062] ? copy_msghdr_from_user+0xfb/0x150 [ 511.297080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.297104] ? lock_acquire+0x15e/0x2f0 [ 511.297120] ___sys_sendmsg+0x10f/0x1b0 [ 511.297138] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.297155] ? perf_trace_lock+0xb5/0x5d0 [ 511.297173] ? __pfx_perf_trace_lock+0x10/0x10 [ 511.297186] ? proc_fail_nth_write+0x97/0x220 [ 511.297204] ? lock_acquire+0x15e/0x2f0 [ 511.297217] ? __fget_files+0x34/0x3b0 [ 511.297230] ? find_held_lock+0x2b/0x80 [ 511.297247] ? __fget_files+0x203/0x3b0 [ 511.297259] ? lock_release+0xc8/0x290 [ 511.297275] ? __fget_files+0x20d/0x3b0 [ 511.297292] __sys_sendmsg+0x150/0x200 [ 511.297310] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.297334] ? __pfx_ksys_write+0x10/0x10 [ 511.297354] do_syscall_64+0xbf/0x360 [ 511.297368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.297381] RIP: 0033:0x7fd1a19b0b19 [ 511.297390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.297402] RSP: 002b:00007fd19ef26188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.297414] RAX: ffffffffffffffda RBX: 00007fd1a1ac3f60 RCX: 00007fd1a19b0b19 [ 511.297422] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 511.297430] RBP: 00007fd19ef261d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.297437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.297444] R13: 00007ffc9938f10f R14: 00007fd19ef26300 R15: 0000000000022000 [ 511.297462] [ 511.316647] FAULT_INJECTION: forcing a failure. [ 511.316647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.317599] CPU: 1 UID: 0 PID: 5729 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 511.317617] Tainted: [W]=WARN [ 511.317621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.317628] Call Trace: [ 511.317632] [ 511.317637] dump_stack_lvl+0xfa/0x120 [ 511.317657] should_fail_ex+0x4d7/0x5e0 [ 511.317673] _copy_from_iter+0x1dc/0x1660 [ 511.317688] ? lock_acquire+0x15e/0x2f0 [ 511.317702] ? __virt_addr_valid+0x1c6/0x5d0 [ 511.317720] ? find_held_lock+0x2b/0x80 [ 511.317739] ? __pfx__copy_from_iter+0x10/0x10 [ 511.317752] ? lock_release+0xc8/0x290 [ 511.317769] ? __virt_addr_valid+0x100/0x5d0 [ 511.317789] ? __check_object_size+0x57b/0x880 [ 511.317810] netlink_sendmsg+0x809/0xd80 [ 511.317832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.317859] ____sys_sendmsg+0xa67/0xc20 [ 511.317873] ? copy_msghdr_from_user+0xfb/0x150 [ 511.317891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.317911] ? lock_acquire+0x15e/0x2f0 [ 511.317927] ___sys_sendmsg+0x10f/0x1b0 [ 511.317945] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.317962] ? perf_trace_lock+0xb5/0x5d0 [ 511.317979] ? __pfx_perf_trace_lock+0x10/0x10 [ 511.317992] ? proc_fail_nth_write+0x97/0x220 [ 511.318008] ? lock_acquire+0x15e/0x2f0 [ 511.318021] ? __fget_files+0x34/0x3b0 [ 511.318032] ? find_held_lock+0x2b/0x80 [ 511.318050] ? __fget_files+0x203/0x3b0 [ 511.318061] ? lock_release+0xc8/0x290 [ 511.318077] ? __fget_files+0x20d/0x3b0 [ 511.318099] __sys_sendmsg+0x150/0x200 [ 511.318117] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.318141] ? __pfx_ksys_write+0x10/0x10 [ 511.318159] do_syscall_64+0xbf/0x360 [ 511.318172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.318184] RIP: 0033:0x7f6f6911eb19 [ 511.318193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.318204] RSP: 002b:00007f6f66694188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.318215] RAX: ffffffffffffffda RBX: 00007f6f69231f60 RCX: 00007f6f6911eb19 [ 511.318224] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 511.318231] RBP: 00007f6f666941d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.318238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.318245] R13: 00007ffc687abe2f R14: 00007f6f66694300 R15: 0000000000022000 [ 511.318263] [ 511.326363] Bluetooth: Frame is too long (len 36, expected len 4) [ 511.356657] Bluetooth: hci4: connection err: -111 05:57:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 4) 05:57:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 7) [ 511.449975] FAULT_INJECTION: forcing a failure. [ 511.449975] name failslab, interval 1, probability 0, space 0, times 0 [ 511.451844] CPU: 0 UID: 0 PID: 5743 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 511.451881] Tainted: [W]=WARN [ 511.451889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.451903] Call Trace: [ 511.451911] [ 511.451920] dump_stack_lvl+0xfa/0x120 [ 511.451967] should_fail_ex+0x4d7/0x5e0 [ 511.452001] should_failslab+0xc2/0x120 [ 511.452031] __kmalloc_cache_noprof+0x73/0x690 [ 511.452070] ? xfrm_policy_alloc+0x95/0x420 [ 511.452117] ? avc_has_perm_noaudit+0x150/0x3d0 [ 511.452161] ? xfrm_policy_alloc+0x95/0x420 [ 511.452197] xfrm_policy_alloc+0x95/0x420 [ 511.452238] xfrm_policy_construct+0x2f/0x550 [ 511.452282] xfrm_add_policy+0x282/0x5c0 [ 511.452320] ? __pfx_xfrm_add_policy+0x10/0x10 [ 511.452353] ? cap_capable+0xdb/0x3b0 [ 511.452393] ? __nla_parse+0x42/0x60 [ 511.452431] ? __pfx_xfrm_add_policy+0x10/0x10 [ 511.452464] xfrm_user_rcv_msg+0x459/0xa00 [ 511.452505] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 511.452539] ? __is_insn_slot_addr+0x136/0x290 [ 511.452578] ? lock_release+0xc8/0x290 [ 511.452612] ? __is_insn_slot_addr+0x140/0x290 [ 511.452694] ? __pfx___mutex_trylock_common+0x10/0x10 [ 511.452740] netlink_rcv_skb+0x147/0x430 [ 511.452781] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 511.452818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.452874] ? netlink_deliver_tap+0x1ae/0xce0 [ 511.452909] ? selinux_netlink_send+0x507/0x880 [ 511.452943] xfrm_netlink_rcv+0x74/0x90 [ 511.452972] netlink_unicast+0x5a7/0x870 [ 511.453021] ? __pfx_netlink_unicast+0x10/0x10 [ 511.453078] netlink_sendmsg+0x8ac/0xd80 [ 511.453121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.453175] ____sys_sendmsg+0xa67/0xc20 [ 511.453206] ? copy_msghdr_from_user+0xfb/0x150 [ 511.453243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.453280] ? lock_acquire+0x15e/0x2f0 [ 511.453309] ___sys_sendmsg+0x10f/0x1b0 [ 511.453344] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.453375] ? perf_trace_lock+0xb5/0x5d0 [ 511.453406] ? __pfx_perf_trace_lock+0x10/0x10 [ 511.453431] ? proc_fail_nth_write+0x97/0x220 [ 511.453462] ? lock_acquire+0x15e/0x2f0 [ 511.453486] ? __fget_files+0x34/0x3b0 [ 511.453508] ? find_held_lock+0x2b/0x80 [ 511.453540] ? __fget_files+0x203/0x3b0 [ 511.453562] ? lock_release+0xc8/0x290 [ 511.453592] ? __fget_files+0x20d/0x3b0 [ 511.453625] __sys_sendmsg+0x150/0x200 [ 511.453659] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.453704] ? __pfx_ksys_write+0x10/0x10 [ 511.453740] do_syscall_64+0xbf/0x360 [ 511.453764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.453787] RIP: 0033:0x7f6f6911eb19 [ 511.453804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.453824] RSP: 002b:00007f6f66694188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.453846] RAX: ffffffffffffffda RBX: 00007f6f69231f60 RCX: 00007f6f6911eb19 [ 511.453861] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 511.453874] RBP: 00007f6f666941d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.453887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.453900] R13: 00007ffc687abe2f R14: 00007f6f66694300 R15: 0000000000022000 [ 511.453933] 05:57:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 8) 05:57:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:16 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 7) 05:57:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x3, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 5) 05:57:16 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x4}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 5) 05:57:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 9) [ 522.464335] Bluetooth: hci4: connection err: -111 [ 522.468613] FAULT_INJECTION: forcing a failure. [ 522.468613] name failslab, interval 1, probability 0, space 0, times 0 [ 522.470323] CPU: 1 UID: 0 PID: 5762 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 522.470358] Tainted: [W]=WARN [ 522.470366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 522.470379] Call Trace: [ 522.470387] [ 522.470396] dump_stack_lvl+0xfa/0x120 [ 522.470439] should_fail_ex+0x4d7/0x5e0 [ 522.470474] should_failslab+0xc2/0x120 [ 522.470504] __kmalloc_cache_noprof+0x73/0x690 [ 522.470542] ? xfrm_policy_alloc+0x95/0x420 [ 522.470578] ? avc_has_perm_noaudit+0x150/0x3d0 [ 522.470620] ? xfrm_policy_alloc+0x95/0x420 [ 522.470653] xfrm_policy_alloc+0x95/0x420 [ 522.470690] xfrm_policy_construct+0x2f/0x550 [ 522.470728] xfrm_add_policy+0x282/0x5c0 [ 522.470763] ? __pfx_xfrm_add_policy+0x10/0x10 [ 522.470793] ? cap_capable+0xdb/0x3b0 [ 522.470832] ? __nla_parse+0x42/0x60 [ 522.470864] ? __pfx_xfrm_add_policy+0x10/0x10 [ 522.470895] xfrm_user_rcv_msg+0x459/0xa00 [ 522.470931] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 522.470962] ? lock_acquire+0x15e/0x2f0 [ 522.470989] ? find_held_lock+0x2b/0x80 [ 522.471023] ? finish_task_switch.isra.0+0x201/0x840 [ 522.471113] ? __pfx___mutex_trylock_common+0x10/0x10 [ 522.471153] netlink_rcv_skb+0x147/0x430 [ 522.471190] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 522.471224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.471276] ? netlink_deliver_tap+0x1ae/0xce0 [ 522.471307] ? selinux_netlink_send+0x507/0x880 [ 522.471338] xfrm_netlink_rcv+0x74/0x90 [ 522.471366] netlink_unicast+0x5a7/0x870 [ 522.471419] ? __pfx_netlink_unicast+0x10/0x10 [ 522.471469] netlink_sendmsg+0x8ac/0xd80 [ 522.471510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.471560] ____sys_sendmsg+0xa67/0xc20 [ 522.471589] ? copy_msghdr_from_user+0xfb/0x150 [ 522.471623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.471660] ? lock_acquire+0x15e/0x2f0 [ 522.471690] ___sys_sendmsg+0x10f/0x1b0 [ 522.471724] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.471755] ? perf_trace_lock+0xb5/0x5d0 [ 522.471786] ? __pfx_perf_trace_lock+0x10/0x10 [ 522.471811] ? proc_fail_nth_write+0x97/0x220 [ 522.471842] ? lock_acquire+0x15e/0x2f0 [ 522.471866] ? __fget_files+0x34/0x3b0 [ 522.471889] ? find_held_lock+0x2b/0x80 [ 522.471921] ? __fget_files+0x203/0x3b0 [ 522.471943] ? lock_release+0xc8/0x290 [ 522.471973] ? __fget_files+0x20d/0x3b0 [ 522.472007] __sys_sendmsg+0x150/0x200 [ 522.472040] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.472085] ? __pfx_ksys_write+0x10/0x10 [ 522.472122] do_syscall_64+0xbf/0x360 [ 522.472147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.472170] RIP: 0033:0x7fd1a19b0b19 [ 522.472187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.472208] RSP: 002b:00007fd19ef26188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.472229] RAX: ffffffffffffffda RBX: 00007fd1a1ac3f60 RCX: 00007fd1a19b0b19 [ 522.472244] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 522.472257] RBP: 00007fd19ef261d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.472271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.472284] R13: 00007ffc9938f10f R14: 00007fd19ef26300 R15: 0000000000022000 [ 522.472317] [ 522.560588] FAULT_INJECTION: forcing a failure. [ 522.560588] name failslab, interval 1, probability 0, space 0, times 0 [ 522.562284] CPU: 0 UID: 0 PID: 5767 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 522.562319] Tainted: [W]=WARN [ 522.562326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 522.562338] Call Trace: [ 522.562347] [ 522.562356] dump_stack_lvl+0xfa/0x120 05:57:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:16 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x4}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 522.562398] should_fail_ex+0x4d7/0x5e0 [ 522.562425] ? ____sys_sendmsg+0xa67/0xc20 [ 522.562456] should_failslab+0xc2/0x120 [ 522.562485] kmem_cache_alloc_node_noprof+0x79/0x690 [ 522.562523] ? __alloc_skb+0x2ab/0x370 [ 522.562562] ? __alloc_skb+0x2ab/0x370 [ 522.562590] __alloc_skb+0x2ab/0x370 [ 522.562621] ? __pfx___alloc_skb+0x10/0x10 [ 522.562657] ? __lock_acquire+0x694/0x1b70 [ 522.562692] xfrm_send_policy_notify+0x209/0x1810 [ 522.562736] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 522.562772] ? xfrm_policy_kill+0x281/0x3e0 [ 522.562799] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 522.562836] km_policy_notify+0xb3/0x240 [ 522.562871] xfrm_add_policy+0x42e/0x5c0 [ 522.562905] ? __pfx_xfrm_add_policy+0x10/0x10 [ 522.562934] ? cap_capable+0xdb/0x3b0 [ 522.562973] ? __nla_parse+0x42/0x60 [ 522.563005] ? __pfx_xfrm_add_policy+0x10/0x10 [ 522.563036] xfrm_user_rcv_msg+0x459/0xa00 [ 522.563073] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 522.563110] ? __is_insn_slot_addr+0x136/0x290 [ 522.563146] ? lock_release+0xc8/0x290 [ 522.563176] ? __is_insn_slot_addr+0x140/0x290 [ 522.563250] ? __pfx___mutex_trylock_common+0x10/0x10 [ 522.563289] netlink_rcv_skb+0x147/0x430 [ 522.563326] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 522.563359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.563424] ? netlink_deliver_tap+0x1ae/0xce0 [ 522.563456] ? selinux_netlink_send+0x507/0x880 [ 522.563487] xfrm_netlink_rcv+0x74/0x90 [ 522.563515] netlink_unicast+0x5a7/0x870 [ 522.563555] ? __pfx_netlink_unicast+0x10/0x10 [ 522.563604] netlink_sendmsg+0x8ac/0xd80 [ 522.563646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.563695] ____sys_sendmsg+0xa67/0xc20 [ 522.563722] ? copy_msghdr_from_user+0xfb/0x150 [ 522.563756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.563793] ? lock_acquire+0x15e/0x2f0 [ 522.563822] ___sys_sendmsg+0x10f/0x1b0 [ 522.563857] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.563888] ? perf_trace_lock+0xb5/0x5d0 [ 522.563919] ? __pfx_perf_trace_lock+0x10/0x10 [ 522.563944] ? proc_fail_nth_write+0x97/0x220 [ 522.563976] ? lock_acquire+0x15e/0x2f0 [ 522.564000] ? __fget_files+0x34/0x3b0 [ 522.564022] ? find_held_lock+0x2b/0x80 [ 522.564055] ? __fget_files+0x203/0x3b0 [ 522.564076] ? lock_release+0xc8/0x290 [ 522.564107] ? __fget_files+0x20d/0x3b0 [ 522.564141] __sys_sendmsg+0x150/0x200 [ 522.564174] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.564219] ? __pfx_ksys_write+0x10/0x10 [ 522.564255] do_syscall_64+0xbf/0x360 [ 522.564280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.564303] RIP: 0033:0x7f6f6911eb19 [ 522.564320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.564340] RSP: 002b:00007f6f66694188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.564362] RAX: ffffffffffffffda RBX: 00007f6f69231f60 RCX: 00007f6f6911eb19 [ 522.564376] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 522.564389] RBP: 00007f6f666941d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.564402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.564415] R13: 00007ffc687abe2f R14: 00007f6f66694300 R15: 0000000000022000 [ 522.564449] 05:57:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 6) [ 522.696312] Bluetooth: hci4: connection err: -111 05:57:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 6) 05:57:16 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 8) 05:57:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:16 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x4}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 522.760036] FAULT_INJECTION: forcing a failure. [ 522.760036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.761935] CPU: 1 UID: 0 PID: 5776 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 522.761971] Tainted: [W]=WARN [ 522.761979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 522.761992] Call Trace: [ 522.762000] [ 522.762008] dump_stack_lvl+0xfa/0x120 [ 522.762053] should_fail_ex+0x4d7/0x5e0 [ 522.762095] _copy_from_iter+0x1dc/0x1660 [ 522.762126] ? lock_acquire+0x15e/0x2f0 [ 522.762153] ? __virt_addr_valid+0x1c6/0x5d0 [ 522.762189] ? find_held_lock+0x2b/0x80 [ 522.762225] ? __pfx__copy_from_iter+0x10/0x10 [ 522.762250] ? lock_release+0xc8/0x290 [ 522.762281] ? __virt_addr_valid+0x100/0x5d0 [ 522.762317] ? __check_object_size+0x57b/0x880 [ 522.762360] netlink_sendmsg+0x809/0xd80 [ 522.762404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.762453] ____sys_sendmsg+0xa67/0xc20 [ 522.762483] ? copy_msghdr_from_user+0xfb/0x150 [ 522.762517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.762554] ? lock_acquire+0x15e/0x2f0 [ 522.762583] ___sys_sendmsg+0x10f/0x1b0 [ 522.762617] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.762649] ? perf_trace_lock+0xb5/0x5d0 [ 522.762681] ? __pfx_perf_trace_lock+0x10/0x10 [ 522.762705] ? proc_fail_nth_write+0x97/0x220 [ 522.762736] ? lock_acquire+0x15e/0x2f0 [ 522.762760] ? __fget_files+0x34/0x3b0 [ 522.762783] ? find_held_lock+0x2b/0x80 [ 522.762815] ? __fget_files+0x203/0x3b0 [ 522.762837] ? lock_release+0xc8/0x290 [ 522.762866] ? __fget_files+0x20d/0x3b0 [ 522.762900] __sys_sendmsg+0x150/0x200 [ 522.762933] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.762977] ? __pfx_ksys_write+0x10/0x10 [ 522.763013] do_syscall_64+0xbf/0x360 [ 522.763038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.763061] RIP: 0033:0x7fea4635db19 [ 522.763078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.763100] RSP: 002b:00007fea438d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.763121] RAX: ffffffffffffffda RBX: 00007fea46470f60 RCX: 00007fea4635db19 [ 522.763136] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 522.763150] RBP: 00007fea438d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.763164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.763177] R13: 00007ffdae6859df R14: 00007fea438d3300 R15: 0000000000022000 [ 522.763209] [ 522.856341] Bluetooth: hci4: connection err: -111 [ 522.859854] FAULT_INJECTION: forcing a failure. [ 522.859854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.861545] CPU: 0 UID: 0 PID: 5780 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 522.861580] Tainted: [W]=WARN [ 522.861586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 522.861599] Call Trace: [ 522.861606] [ 522.861615] dump_stack_lvl+0xfa/0x120 [ 522.861657] should_fail_ex+0x4d7/0x5e0 05:57:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 10) 05:57:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 522.861692] _copy_from_iter+0x1dc/0x1660 [ 522.861721] ? lock_acquire+0x15e/0x2f0 [ 522.861746] ? __virt_addr_valid+0x1c6/0x5d0 [ 522.861781] ? find_held_lock+0x2b/0x80 [ 522.861814] ? __pfx__copy_from_iter+0x10/0x10 [ 522.861839] ? lock_release+0xc8/0x290 [ 522.861867] ? __virt_addr_valid+0x100/0x5d0 [ 522.861902] ? __check_object_size+0x57b/0x880 [ 522.861942] netlink_sendmsg+0x809/0xd80 [ 522.861984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.862031] ____sys_sendmsg+0xa67/0xc20 [ 522.862058] ? copy_msghdr_from_user+0xfb/0x150 [ 522.862097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.862132] ? lock_acquire+0x15e/0x2f0 [ 522.862160] ___sys_sendmsg+0x10f/0x1b0 [ 522.862194] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.862224] ? perf_trace_lock+0xb5/0x5d0 [ 522.862254] ? __pfx_perf_trace_lock+0x10/0x10 [ 522.862278] ? proc_fail_nth_write+0x97/0x220 [ 522.862306] ? lock_acquire+0x15e/0x2f0 [ 522.862330] ? __fget_files+0x34/0x3b0 [ 522.862351] ? find_held_lock+0x2b/0x80 [ 522.862382] ? __fget_files+0x203/0x3b0 [ 522.862402] ? lock_release+0xc8/0x290 [ 522.862431] ? __fget_files+0x20d/0x3b0 [ 522.862463] __sys_sendmsg+0x150/0x200 [ 522.862495] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.862538] ? __pfx_ksys_write+0x10/0x10 [ 522.862572] do_syscall_64+0xbf/0x360 [ 522.862595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.862617] RIP: 0033:0x7f9f1f48ab19 [ 522.862634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.862653] RSP: 002b:00007f9f1ca00188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.862674] RAX: ffffffffffffffda RBX: 00007f9f1f59df60 RCX: 00007f9f1f48ab19 [ 522.862688] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 522.862701] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.862714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.862726] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 522.862757] 05:57:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:16 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x36}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3b"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x6c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x8, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:16 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 9) 05:57:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 7) [ 523.071498] Bluetooth: hci4: connection err: -111 [ 523.103579] FAULT_INJECTION: forcing a failure. [ 523.103579] name failslab, interval 1, probability 0, space 0, times 0 [ 523.105485] CPU: 1 UID: 0 PID: 5797 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 523.105521] Tainted: [W]=WARN [ 523.105528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.105541] Call Trace: [ 523.105549] [ 523.105557] dump_stack_lvl+0xfa/0x120 [ 523.105601] should_fail_ex+0x4d7/0x5e0 [ 523.105630] ? ____sys_sendmsg+0xa67/0xc20 [ 523.105662] should_failslab+0xc2/0x120 [ 523.105692] kmem_cache_alloc_node_noprof+0x79/0x690 [ 523.105731] ? __alloc_skb+0x2ab/0x370 [ 523.105772] ? __alloc_skb+0x2ab/0x370 [ 523.105800] __alloc_skb+0x2ab/0x370 [ 523.105832] ? __pfx___alloc_skb+0x10/0x10 [ 523.105868] ? __lock_acquire+0x694/0x1b70 [ 523.105903] xfrm_send_policy_notify+0x209/0x1810 [ 523.105948] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 523.105985] ? xfrm_policy_kill+0x281/0x3e0 [ 523.106012] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 523.106049] km_policy_notify+0xb3/0x240 [ 523.106092] xfrm_add_policy+0x42e/0x5c0 [ 523.106127] ? __pfx_xfrm_add_policy+0x10/0x10 [ 523.106156] ? cap_capable+0xdb/0x3b0 [ 523.106196] ? __nla_parse+0x42/0x60 [ 523.106228] ? __pfx_xfrm_add_policy+0x10/0x10 [ 523.106259] xfrm_user_rcv_msg+0x459/0xa00 [ 523.106296] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 523.106326] ? __is_insn_slot_addr+0x136/0x290 [ 523.106362] ? lock_release+0xc8/0x290 [ 523.106392] ? __is_insn_slot_addr+0x140/0x290 [ 523.106467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 523.106507] netlink_rcv_skb+0x147/0x430 [ 523.106544] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 523.106578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.106630] ? netlink_deliver_tap+0x1ae/0xce0 [ 523.106662] ? selinux_netlink_send+0x507/0x880 [ 523.106693] xfrm_netlink_rcv+0x74/0x90 [ 523.106721] netlink_unicast+0x5a7/0x870 [ 523.106761] ? __pfx_netlink_unicast+0x10/0x10 [ 523.106811] netlink_sendmsg+0x8ac/0xd80 [ 523.106852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.106902] ____sys_sendmsg+0xa67/0xc20 [ 523.106929] ? copy_msghdr_from_user+0xfb/0x150 [ 523.106963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.107000] ? lock_acquire+0x15e/0x2f0 [ 523.107031] ___sys_sendmsg+0x10f/0x1b0 [ 523.107065] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.107097] ? perf_trace_lock+0xb5/0x5d0 [ 523.107128] ? __pfx_perf_trace_lock+0x10/0x10 [ 523.107152] ? proc_fail_nth_write+0x97/0x220 [ 523.107183] ? lock_acquire+0x15e/0x2f0 [ 523.107207] ? __fget_files+0x34/0x3b0 [ 523.107230] ? find_held_lock+0x2b/0x80 [ 523.107263] ? __fget_files+0x203/0x3b0 [ 523.107284] ? lock_release+0xc8/0x290 [ 523.107315] ? __fget_files+0x20d/0x3b0 [ 523.107349] __sys_sendmsg+0x150/0x200 [ 523.107382] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.107440] ? __pfx_ksys_write+0x10/0x10 [ 523.107479] do_syscall_64+0xbf/0x360 [ 523.107503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.107527] RIP: 0033:0x7fd1a19b0b19 [ 523.107544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.107565] RSP: 002b:00007fd19ef26188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.107586] RAX: ffffffffffffffda RBX: 00007fd1a1ac3f60 RCX: 00007fd1a19b0b19 [ 523.107601] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 523.107614] RBP: 00007fd19ef261d0 R08: 0000000000000000 R09: 0000000000000000 [ 523.107628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.107641] R13: 00007ffc9938f10f R14: 00007fd19ef26300 R15: 0000000000022000 [ 523.107675] [ 523.192007] FAULT_INJECTION: forcing a failure. [ 523.192007] name failslab, interval 1, probability 0, space 0, times 0 [ 523.193396] CPU: 0 UID: 0 PID: 5801 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 523.193424] Tainted: [W]=WARN [ 523.193430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.193441] Call Trace: [ 523.193448] [ 523.193455] dump_stack_lvl+0xfa/0x120 [ 523.193490] should_fail_ex+0x4d7/0x5e0 [ 523.193518] should_failslab+0xc2/0x120 [ 523.193542] __kmalloc_cache_noprof+0x73/0x690 [ 523.193572] ? xfrm_policy_alloc+0x95/0x420 [ 523.193599] ? avc_has_perm_noaudit+0x150/0x3d0 [ 523.193634] ? xfrm_policy_alloc+0x95/0x420 [ 523.193660] xfrm_policy_alloc+0x95/0x420 [ 523.193690] xfrm_policy_construct+0x2f/0x550 [ 523.193721] xfrm_add_policy+0x282/0x5c0 [ 523.193750] ? __pfx_xfrm_add_policy+0x10/0x10 [ 523.193774] ? cap_capable+0xdb/0x3b0 [ 523.193805] ? __nla_parse+0x42/0x60 [ 523.193830] ? __pfx_xfrm_add_policy+0x10/0x10 [ 523.193856] xfrm_user_rcv_msg+0x459/0xa00 [ 523.193885] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 523.193909] ? __is_insn_slot_addr+0x136/0x290 [ 523.193939] ? lock_release+0xc8/0x290 [ 523.193964] ? __is_insn_slot_addr+0x140/0x290 [ 523.194023] ? __pfx___mutex_trylock_common+0x10/0x10 [ 523.194055] netlink_rcv_skb+0x147/0x430 [ 523.194091] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 523.194119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.194160] ? netlink_deliver_tap+0x1ae/0xce0 [ 523.194186] ? selinux_netlink_send+0x507/0x880 [ 523.194210] xfrm_netlink_rcv+0x74/0x90 [ 523.194233] netlink_unicast+0x5a7/0x870 [ 523.194265] ? __pfx_netlink_unicast+0x10/0x10 [ 523.194310] netlink_sendmsg+0x8ac/0xd80 [ 523.194343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.194383] ____sys_sendmsg+0xa67/0xc20 [ 523.194406] ? copy_msghdr_from_user+0xfb/0x150 [ 523.194434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.194464] ? lock_acquire+0x15e/0x2f0 [ 523.194488] ___sys_sendmsg+0x10f/0x1b0 [ 523.194516] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.194541] ? perf_trace_lock+0xb5/0x5d0 [ 523.194566] ? __pfx_perf_trace_lock+0x10/0x10 [ 523.194586] ? proc_fail_nth_write+0x97/0x220 [ 523.194611] ? lock_acquire+0x15e/0x2f0 [ 523.194630] ? __fget_files+0x34/0x3b0 [ 523.194649] ? find_held_lock+0x2b/0x80 [ 523.194675] ? __fget_files+0x203/0x3b0 [ 523.194692] ? lock_release+0xc8/0x290 [ 523.194716] ? __fget_files+0x20d/0x3b0 [ 523.194743] __sys_sendmsg+0x150/0x200 [ 523.194770] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.194806] ? __pfx_ksys_write+0x10/0x10 [ 523.194836] do_syscall_64+0xbf/0x360 [ 523.194856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.194875] RIP: 0033:0x7fea4635db19 [ 523.194888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.194905] RSP: 002b:00007fea438d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.194923] RAX: ffffffffffffffda RBX: 00007fea46470f60 RCX: 00007fea4635db19 [ 523.194935] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 523.194945] RBP: 00007fea438d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 523.194956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.194966] R13: 00007ffdae6859df R14: 00007fea438d3300 R15: 0000000000022000 [ 523.194993] 05:57:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 7) 05:57:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 8) 05:57:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x9, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 11) 05:57:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:25 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x36}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3b"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x6c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:25 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 10) [ 532.056790] FAULT_INJECTION: forcing a failure. [ 532.056790] name failslab, interval 1, probability 0, space 0, times 0 [ 532.057827] CPU: 0 UID: 0 PID: 5810 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 532.057848] Tainted: [W]=WARN [ 532.057852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.057860] Call Trace: [ 532.057865] [ 532.057870] dump_stack_lvl+0xfa/0x120 [ 532.057898] should_fail_ex+0x4d7/0x5e0 [ 532.057919] should_failslab+0xc2/0x120 [ 532.057937] __kmalloc_cache_noprof+0x73/0x690 [ 532.057958] ? xfrm_policy_alloc+0x95/0x420 [ 532.057979] ? avc_has_perm_noaudit+0x150/0x3d0 [ 532.058005] ? xfrm_policy_alloc+0x95/0x420 [ 532.058024] xfrm_policy_alloc+0x95/0x420 [ 532.058046] xfrm_policy_construct+0x2f/0x550 [ 532.058068] xfrm_add_policy+0x282/0x5c0 [ 532.058094] ? __pfx_xfrm_add_policy+0x10/0x10 [ 532.058111] ? cap_capable+0xdb/0x3b0 [ 532.058135] ? __nla_parse+0x42/0x60 [ 532.058153] ? __pfx_xfrm_add_policy+0x10/0x10 [ 532.058172] xfrm_user_rcv_msg+0x459/0xa00 [ 532.058193] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 532.058210] ? __is_insn_slot_addr+0x136/0x290 [ 532.058232] ? lock_release+0xc8/0x290 [ 532.058252] ? __is_insn_slot_addr+0x140/0x290 [ 532.058294] ? __pfx___mutex_trylock_common+0x10/0x10 [ 532.058318] netlink_rcv_skb+0x147/0x430 [ 532.058341] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 532.058361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.058391] ? netlink_deliver_tap+0x1ae/0xce0 [ 532.058410] ? selinux_netlink_send+0x507/0x880 [ 532.058427] xfrm_netlink_rcv+0x74/0x90 [ 532.058444] netlink_unicast+0x5a7/0x870 [ 532.058468] ? __pfx_netlink_unicast+0x10/0x10 [ 532.058497] netlink_sendmsg+0x8ac/0xd80 [ 532.058521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.058550] ____sys_sendmsg+0xa67/0xc20 [ 532.058567] ? copy_msghdr_from_user+0xfb/0x150 [ 532.058587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.058608] ? lock_acquire+0x15e/0x2f0 [ 532.058626] ___sys_sendmsg+0x10f/0x1b0 [ 532.058646] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.058664] ? perf_trace_lock+0xb5/0x5d0 [ 532.058682] ? __pfx_perf_trace_lock+0x10/0x10 [ 532.058696] ? proc_fail_nth_write+0x97/0x220 [ 532.058715] ? lock_acquire+0x15e/0x2f0 [ 532.058729] ? __fget_files+0x34/0x3b0 [ 532.058743] ? find_held_lock+0x2b/0x80 [ 532.058761] ? __fget_files+0x203/0x3b0 [ 532.058774] ? lock_release+0xc8/0x290 [ 532.058791] ? __fget_files+0x20d/0x3b0 [ 532.058811] __sys_sendmsg+0x150/0x200 [ 532.058830] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.058857] ? __pfx_ksys_write+0x10/0x10 [ 532.058878] do_syscall_64+0xbf/0x360 [ 532.058892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.058906] RIP: 0033:0x7f9f1f48ab19 [ 532.058916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.058929] RSP: 002b:00007f9f1ca00188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.058942] RAX: ffffffffffffffda RBX: 00007f9f1f59df60 RCX: 00007f9f1f48ab19 [ 532.058951] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 532.058958] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.058966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.058974] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 532.058996] [ 532.113367] Bluetooth: hci4: connection err: -111 05:57:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 12) 05:57:26 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x36}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3b"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x6c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 532.160847] Bluetooth: hci4: connection err: -111 05:57:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 8) 05:57:35 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x4f}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 13) 05:57:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:35 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 11) 05:57:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xae00, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 9) 05:57:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 541.162632] FAULT_INJECTION: forcing a failure. [ 541.162632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.164962] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 541.165005] Tainted: [W]=WARN [ 541.165014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 541.165028] Call Trace: [ 541.165037] [ 541.165048] dump_stack_lvl+0xfa/0x120 [ 541.165106] should_fail_ex+0x4d7/0x5e0 [ 541.165145] _copy_to_user+0x32/0xd0 [ 541.165183] simple_read_from_buffer+0xe0/0x180 [ 541.165229] proc_fail_nth_read+0x18a/0x240 [ 541.165262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.165294] ? security_file_permission+0x22/0x90 [ 541.165338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.165369] vfs_read+0x1eb/0xc70 [ 541.165406] ? __pfx_vfs_read+0x10/0x10 [ 541.165436] ? lock_release+0xc8/0x290 [ 541.165474] ? __fget_files+0x20d/0x3b0 [ 541.165516] ksys_read+0x121/0x240 [ 541.165544] ? __pfx_ksys_read+0x10/0x10 [ 541.165586] do_syscall_64+0xbf/0x360 [ 541.165615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.165642] RIP: 0033:0x7f6f690d169c [ 541.165663] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 541.165688] RSP: 002b:00007f6f66694170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.165713] RAX: ffffffffffffffda RBX: 00000000000000b8 RCX: 00007f6f690d169c [ 541.165732] RDX: 000000000000000f RSI: 00007f6f666941e0 RDI: 0000000000000005 [ 541.165748] RBP: 00007f6f666941d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.165764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.165779] R13: 00007ffc687abe2f R14: 00007f6f66694300 R15: 0000000000022000 [ 541.165820] [ 541.210265] FAULT_INJECTION: forcing a failure. [ 541.210265] name failslab, interval 1, probability 0, space 0, times 0 [ 541.211434] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 541.211455] Tainted: [W]=WARN [ 541.211459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 541.211466] Call Trace: [ 541.211471] [ 541.211476] dump_stack_lvl+0xfa/0x120 [ 541.211504] should_fail_ex+0x4d7/0x5e0 [ 541.211522] ? ____sys_sendmsg+0xa67/0xc20 [ 541.211541] should_failslab+0xc2/0x120 [ 541.211558] kmem_cache_alloc_node_noprof+0x79/0x690 [ 541.211580] ? __alloc_skb+0x2ab/0x370 [ 541.211603] ? __alloc_skb+0x2ab/0x370 [ 541.211619] __alloc_skb+0x2ab/0x370 [ 541.211643] ? __pfx___alloc_skb+0x10/0x10 [ 541.211663] ? __lock_acquire+0x694/0x1b70 [ 541.211683] xfrm_send_policy_notify+0x209/0x1810 [ 541.211708] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 541.211728] ? xfrm_policy_kill+0x281/0x3e0 05:57:35 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 12) [ 541.211743] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 541.211763] km_policy_notify+0xb3/0x240 [ 541.211782] xfrm_add_policy+0x42e/0x5c0 [ 541.211800] ? __pfx_xfrm_add_policy+0x10/0x10 [ 541.211816] ? cap_capable+0xdb/0x3b0 [ 541.211839] ? __nla_parse+0x42/0x60 [ 541.211856] ? __pfx_xfrm_add_policy+0x10/0x10 [ 541.211873] xfrm_user_rcv_msg+0x459/0xa00 [ 541.211893] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.211909] ? __is_insn_slot_addr+0x136/0x290 [ 541.211929] ? lock_release+0xc8/0x290 [ 541.211945] ? __is_insn_slot_addr+0x140/0x290 [ 541.211986] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.212009] netlink_rcv_skb+0x147/0x430 [ 541.212029] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.212048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.212076] ? netlink_deliver_tap+0x1ae/0xce0 05:57:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 541.212098] ? selinux_netlink_send+0x507/0x880 [ 541.212115] xfrm_netlink_rcv+0x74/0x90 [ 541.212130] netlink_unicast+0x5a7/0x870 [ 541.212152] ? __pfx_netlink_unicast+0x10/0x10 [ 541.212179] netlink_sendmsg+0x8ac/0xd80 [ 541.212202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.212228] ____sys_sendmsg+0xa67/0xc20 [ 541.212243] ? copy_msghdr_from_user+0xfb/0x150 [ 541.212262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.212282] ? lock_acquire+0x15e/0x2f0 [ 541.212299] ___sys_sendmsg+0x10f/0x1b0 [ 541.212318] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.212334] ? perf_trace_lock+0xb5/0x5d0 [ 541.212351] ? __pfx_perf_trace_lock+0x10/0x10 [ 541.212365] ? proc_fail_nth_write+0x97/0x220 [ 541.212384] ? lock_acquire+0x15e/0x2f0 [ 541.212397] ? __fget_files+0x34/0x3b0 [ 541.212411] ? find_held_lock+0x2b/0x80 [ 541.212429] ? __fget_files+0x203/0x3b0 [ 541.212440] ? lock_release+0xc8/0x290 [ 541.212457] ? __fget_files+0x20d/0x3b0 [ 541.212475] __sys_sendmsg+0x150/0x200 [ 541.212493] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.212517] ? __pfx_ksys_write+0x10/0x10 [ 541.212538] do_syscall_64+0xbf/0x360 [ 541.212553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.212566] RIP: 0033:0x7fea4635db19 [ 541.212575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 541.212587] RSP: 002b:00007fea438d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.212600] RAX: ffffffffffffffda RBX: 00007fea46470f60 RCX: 00007fea4635db19 [ 541.212608] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 541.212616] RBP: 00007fea438d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.212623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.212630] R13: 00007ffdae6859df R14: 00007fea438d3300 R15: 0000000000022000 [ 541.212649] [ 541.212949] FAULT_INJECTION: forcing a failure. [ 541.212949] name failslab, interval 1, probability 0, space 0, times 0 [ 541.273457] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 541.273499] Tainted: [W]=WARN [ 541.273506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 541.273520] Call Trace: [ 541.273529] [ 541.273540] dump_stack_lvl+0xfa/0x120 [ 541.273586] should_fail_ex+0x4d7/0x5e0 [ 541.273622] should_failslab+0xc2/0x120 [ 541.273653] __kmalloc_cache_noprof+0x73/0x690 [ 541.273693] ? xfrm_policy_alloc+0x95/0x420 05:57:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 10) [ 541.273729] ? avc_has_perm_noaudit+0x150/0x3d0 [ 541.273774] ? xfrm_policy_alloc+0x95/0x420 [ 541.273809] xfrm_policy_alloc+0x95/0x420 [ 541.273849] xfrm_policy_construct+0x2f/0x550 [ 541.273889] xfrm_add_policy+0x282/0x5c0 [ 541.273926] ? __pfx_xfrm_add_policy+0x10/0x10 [ 541.273958] ? cap_capable+0xdb/0x3b0 [ 541.273999] ? __nla_parse+0x42/0x60 [ 541.274033] ? __pfx_xfrm_add_policy+0x10/0x10 [ 541.274066] xfrm_user_rcv_msg+0x459/0xa00 [ 541.274113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.274145] ? __is_insn_slot_addr+0x136/0x290 [ 541.274183] ? lock_release+0xc8/0x290 [ 541.274216] ? __is_insn_slot_addr+0x140/0x290 [ 541.274294] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.274337] netlink_rcv_skb+0x147/0x430 [ 541.274379] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.274415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.274470] ? netlink_deliver_tap+0x1ae/0xce0 [ 541.274503] ? selinux_netlink_send+0x507/0x880 [ 541.274535] xfrm_netlink_rcv+0x74/0x90 [ 541.274566] netlink_unicast+0x5a7/0x870 [ 541.274609] ? __pfx_netlink_unicast+0x10/0x10 [ 541.274661] netlink_sendmsg+0x8ac/0xd80 [ 541.274705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.274758] ____sys_sendmsg+0xa67/0xc20 [ 541.274789] ? copy_msghdr_from_user+0xfb/0x150 [ 541.274825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.274865] ? lock_acquire+0x15e/0x2f0 [ 541.274896] ___sys_sendmsg+0x10f/0x1b0 [ 541.274934] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.274967] ? perf_trace_lock+0xb5/0x5d0 [ 541.275000] ? __pfx_perf_trace_lock+0x10/0x10 [ 541.275026] ? proc_fail_nth_write+0x97/0x220 [ 541.275059] ? lock_acquire+0x15e/0x2f0 [ 541.275085] ? __fget_files+0x34/0x3b0 [ 541.275109] ? find_held_lock+0x2b/0x80 [ 541.275143] ? __fget_files+0x203/0x3b0 [ 541.275166] ? lock_release+0xc8/0x290 [ 541.275198] ? __fget_files+0x20d/0x3b0 [ 541.275234] __sys_sendmsg+0x150/0x200 [ 541.275269] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.275317] ? __pfx_ksys_write+0x10/0x10 [ 541.275356] do_syscall_64+0xbf/0x360 [ 541.275382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.275407] RIP: 0033:0x7f9f1f48ab19 [ 541.275427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 541.275449] RSP: 002b:00007f9f1ca00188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.275473] RAX: ffffffffffffffda RBX: 00007f9f1f59df60 RCX: 00007f9f1f48ab19 [ 541.275488] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 541.275502] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.275516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.275530] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 541.275566] [ 541.348599] Bluetooth: hci4: connection err: -111 05:57:35 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x4f}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x60, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 9) [ 541.565740] Bluetooth: hci4: connection err: -111 [ 541.638932] FAULT_INJECTION: forcing a failure. [ 541.638932] name failslab, interval 1, probability 0, space 0, times 0 [ 541.640758] CPU: 1 UID: 0 PID: 5866 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 541.640793] Tainted: [W]=WARN [ 541.640801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 541.640814] Call Trace: [ 541.640821] [ 541.640830] dump_stack_lvl+0xfa/0x120 [ 541.640873] should_fail_ex+0x4d7/0x5e0 [ 541.640901] ? ____sys_sendmsg+0xa67/0xc20 [ 541.640934] should_failslab+0xc2/0x120 [ 541.640963] kmem_cache_alloc_node_noprof+0x79/0x690 [ 541.641002] ? __alloc_skb+0x2ab/0x370 [ 541.641043] ? __alloc_skb+0x2ab/0x370 [ 541.641072] __alloc_skb+0x2ab/0x370 [ 541.641111] ? __pfx___alloc_skb+0x10/0x10 [ 541.641147] ? __lock_acquire+0x694/0x1b70 [ 541.641182] xfrm_send_policy_notify+0x209/0x1810 [ 541.641226] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 541.641263] ? xfrm_policy_kill+0x281/0x3e0 [ 541.641290] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 541.641327] km_policy_notify+0xb3/0x240 [ 541.641362] xfrm_add_policy+0x42e/0x5c0 [ 541.641396] ? __pfx_xfrm_add_policy+0x10/0x10 [ 541.641426] ? cap_capable+0xdb/0x3b0 [ 541.641465] ? __nla_parse+0x42/0x60 [ 541.641497] ? __pfx_xfrm_add_policy+0x10/0x10 [ 541.641530] xfrm_user_rcv_msg+0x459/0xa00 [ 541.641567] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.641597] ? __is_insn_slot_addr+0x136/0x290 [ 541.641633] ? lock_release+0xc8/0x290 [ 541.641663] ? __is_insn_slot_addr+0x140/0x290 [ 541.641737] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.641778] netlink_rcv_skb+0x147/0x430 [ 541.641814] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.641848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.641900] ? netlink_deliver_tap+0x1ae/0xce0 [ 541.641931] ? selinux_netlink_send+0x507/0x880 [ 541.641963] xfrm_netlink_rcv+0x74/0x90 [ 541.641991] netlink_unicast+0x5a7/0x870 [ 541.642032] ? __pfx_netlink_unicast+0x10/0x10 [ 541.642086] netlink_sendmsg+0x8ac/0xd80 [ 541.642127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.642177] ____sys_sendmsg+0xa67/0xc20 [ 541.642204] ? copy_msghdr_from_user+0xfb/0x150 [ 541.642238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.642275] ? lock_acquire+0x15e/0x2f0 [ 541.642305] ___sys_sendmsg+0x10f/0x1b0 [ 541.642340] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.642371] ? perf_trace_lock+0xb5/0x5d0 [ 541.642402] ? __pfx_perf_trace_lock+0x10/0x10 [ 541.642427] ? proc_fail_nth_write+0x97/0x220 [ 541.642458] ? lock_acquire+0x15e/0x2f0 [ 541.642482] ? __fget_files+0x34/0x3b0 [ 541.642505] ? find_held_lock+0x2b/0x80 [ 541.642537] ? __fget_files+0x203/0x3b0 [ 541.642559] ? lock_release+0xc8/0x290 [ 541.642589] ? __fget_files+0x20d/0x3b0 [ 541.642623] __sys_sendmsg+0x150/0x200 [ 541.642656] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.642701] ? __pfx_ksys_write+0x10/0x10 [ 541.642738] do_syscall_64+0xbf/0x360 [ 541.642763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.642786] RIP: 0033:0x7f9f1f48ab19 [ 541.642803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 541.642824] RSP: 002b:00007f9f1ca00188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.642845] RAX: ffffffffffffffda RBX: 00007f9f1f59df60 RCX: 00007f9f1f48ab19 [ 541.642861] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 541.642874] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.642887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.642900] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 541.642934] 05:57:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 11) 05:57:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 10) 05:57:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x300, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:45 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 13) 05:57:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:45 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x80}, @l2cap_cid_signaling={{0x7c}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x4f}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x85) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 11) 05:57:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 552.094848] FAULT_INJECTION: forcing a failure. [ 552.094848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.096568] CPU: 0 UID: 0 PID: 5881 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 552.096604] Tainted: [W]=WARN [ 552.096611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.096623] Call Trace: [ 552.096631] [ 552.096640] dump_stack_lvl+0xfa/0x120 [ 552.096682] should_fail_ex+0x4d7/0x5e0 [ 552.096716] _copy_to_user+0x32/0xd0 [ 552.096748] simple_read_from_buffer+0xe0/0x180 [ 552.096787] proc_fail_nth_read+0x18a/0x240 [ 552.096815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.096842] ? security_file_permission+0x22/0x90 [ 552.096879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.096904] vfs_read+0x1eb/0xc70 [ 552.096935] ? __pfx_vfs_read+0x10/0x10 [ 552.096961] ? lock_release+0xc8/0x290 [ 552.096993] ? __fget_files+0x20d/0x3b0 [ 552.097027] ksys_read+0x121/0x240 [ 552.097050] ? __pfx_ksys_read+0x10/0x10 [ 552.097093] do_syscall_64+0xbf/0x360 [ 552.097117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.097141] RIP: 0033:0x7fd1a196369c [ 552.097158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 552.097178] RSP: 002b:00007fd19ef26170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.097200] RAX: ffffffffffffffda RBX: 00000000000000b8 RCX: 00007fd1a196369c [ 552.097214] RDX: 000000000000000f RSI: 00007fd19ef261e0 RDI: 0000000000000004 [ 552.097227] RBP: 00007fd19ef261d0 R08: 0000000000000000 R09: 0000000000000000 [ 552.097240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.097253] R13: 00007ffc9938f10f R14: 00007fd19ef26300 R15: 0000000000022000 [ 552.097286] [ 552.122309] Bluetooth: hci4: connection err: -111 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 12) 05:57:46 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8c}, @l2cap_cid_signaling={{0x88}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x5b}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x91) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x900, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 12) 05:57:46 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 13) [ 552.310692] Bluetooth: hci4: connection err: -111 05:57:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (fail_nth: 13) 05:57:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:46 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 552.385143] FAULT_INJECTION: forcing a failure. [ 552.385143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.386167] CPU: 1 UID: 0 PID: 5915 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 552.386187] Tainted: [W]=WARN [ 552.386191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.386199] Call Trace: [ 552.386204] [ 552.386209] dump_stack_lvl+0xfa/0x120 [ 552.386236] should_fail_ex+0x4d7/0x5e0 [ 552.386257] _copy_to_user+0x32/0xd0 [ 552.386276] simple_read_from_buffer+0xe0/0x180 [ 552.386299] proc_fail_nth_read+0x18a/0x240 [ 552.386315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.386330] ? security_file_permission+0x22/0x90 [ 552.386351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.386365] vfs_read+0x1eb/0xc70 [ 552.386383] ? __pfx_vfs_read+0x10/0x10 [ 552.386396] ? lock_release+0xc8/0x290 [ 552.386415] ? __fget_files+0x20d/0x3b0 [ 552.386435] ksys_read+0x121/0x240 [ 552.386448] ? __pfx_ksys_read+0x10/0x10 [ 552.386468] do_syscall_64+0xbf/0x360 [ 552.386482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.386495] RIP: 0033:0x7fea4631069c [ 552.386505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 552.386517] RSP: 002b:00007fea438d3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.386529] RAX: ffffffffffffffda RBX: 00000000000000b8 RCX: 00007fea4631069c [ 552.386538] RDX: 000000000000000f RSI: 00007fea438d31e0 RDI: 0000000000000004 [ 552.386545] RBP: 00007fea438d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 552.386553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.386560] R13: 00007ffdae6859df R14: 00007fea438d3300 R15: 0000000000022000 [ 552.386579] [ 552.413377] FAULT_INJECTION: forcing a failure. [ 552.413377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.414485] CPU: 1 UID: 0 PID: 5919 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 552.414504] Tainted: [W]=WARN [ 552.414508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.414515] Call Trace: [ 552.414519] [ 552.414524] dump_stack_lvl+0xfa/0x120 [ 552.414548] should_fail_ex+0x4d7/0x5e0 [ 552.414567] _copy_to_user+0x32/0xd0 [ 552.414585] simple_read_from_buffer+0xe0/0x180 [ 552.414606] proc_fail_nth_read+0x18a/0x240 [ 552.414620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.414635] ? security_file_permission+0x22/0x90 [ 552.414656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.414669] vfs_read+0x1eb/0xc70 [ 552.414686] ? __pfx_vfs_read+0x10/0x10 [ 552.414700] ? lock_release+0xc8/0x290 [ 552.414717] ? __fget_files+0x20d/0x3b0 [ 552.414736] ksys_read+0x121/0x240 [ 552.414749] ? __pfx_ksys_read+0x10/0x10 [ 552.414768] do_syscall_64+0xbf/0x360 [ 552.414781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.414794] RIP: 0033:0x7f9f1f43d69c [ 552.414803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 552.414815] RSP: 002b:00007f9f1ca00170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.414827] RAX: ffffffffffffffda RBX: 00000000000000b8 RCX: 00007f9f1f43d69c [ 552.414834] RDX: 000000000000000f RSI: 00007f9f1ca001e0 RDI: 0000000000000004 [ 552.414842] RBP: 00007f9f1ca001d0 R08: 0000000000000000 R09: 0000000000000000 [ 552.414849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.414856] R13: 00007fffa11dcc6f R14: 00007f9f1ca00300 R15: 0000000000022000 [ 552.414874] 05:57:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:53 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8c}, @l2cap_cid_signaling={{0x88}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x5b}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x91) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:53 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0xf00, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xb0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 559.957816] Bluetooth: hci4: connection err: -111 05:57:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:53 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8c}, @l2cap_cid_signaling={{0x88}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x5b}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x91) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:57:53 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 560.049195] Bluetooth: hci4: connection err: -111 05:57:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:54 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x61}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 560.117688] Bluetooth: hci4: connection err: -111 05:57:54 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:57:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:57:54 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x61}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 560.208469] Bluetooth: hci4: connection err: -111 05:58:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x6000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:02 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:02 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x92}, @l2cap_cid_signaling={{0x8e}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x61}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x97) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 568.525455] Bluetooth: hci4: connection err: -111 05:58:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x30000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:02 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x95}, @l2cap_cid_signaling={{0x91}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x64}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df90"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x9a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 568.650942] Bluetooth: hci4: connection err: -111 05:58:11 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x95}, @l2cap_cid_signaling={{0x91}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x64}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df90"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x9a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x80000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 577.628417] Bluetooth: hci4: connection err: -111 05:58:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xc7, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:11 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x95}, @l2cap_cid_signaling={{0x91}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x64}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df90"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x9a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 577.766651] Bluetooth: hci4: connection err: -111 05:58:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xae000000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xb000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x97}, @l2cap_cid_signaling={{0x93}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x66}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901bef"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x9c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x1000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 587.616354] Bluetooth: hci4: connection err: -111 05:58:21 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x97}, @l2cap_cid_signaling={{0x93}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x66}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901bef"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x9c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xce, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 587.738711] Bluetooth: hci4: connection err: -111 05:58:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x2000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:21 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x97}, @l2cap_cid_signaling={{0x93}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{0xb, 0x0, 0x66}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901bef"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x9c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 587.964248] Bluetooth: hci4: connection err: -111 05:58:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:31 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x3000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:31 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8c}, @l2cap_cid_signaling={{0x88}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_info_rsp={{0xb, 0x0, 0x67}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x91) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xc5, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 597.762697] Bluetooth: hci4: connection err: -111 05:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xd5, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8c}, @l2cap_cid_signaling={{0x88}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_info_rsp={{0xb, 0x0, 0x67}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x91) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x4000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 608.592390] Bluetooth: hci4: connection err: -111 05:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:42 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x8c}, @l2cap_cid_signaling={{0x88}, [@l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x7}}, @l2cap_info_rsp={{0xb, 0x0, 0x67}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x91) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:42 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x9000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:42 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 608.878975] Bluetooth: hci4: connection err: -111 05:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x5, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xc700, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0xf000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 617.910397] Bluetooth: Frame is too long (len 36, expected len 4) [ 617.912063] Bluetooth: hci4: connection err: -111 05:58:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x60000000, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0f000000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="80010000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:58:51 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xce00, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:58:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0xfcffffff, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:58:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xc500, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="effdffff190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 618.156768] Bluetooth: Frame is too long (len 36, expected len 4) [ 618.157496] Bluetooth: hci4: connection err: -111 05:58:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:58:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0xffffff7f, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:59:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xd500, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:01 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0xfffffffc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:59:01 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 627.971307] Bluetooth: Frame is too long (len 36, expected len 4) [ 627.973575] Bluetooth: hci4: connection err: -111 05:59:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 628.008122] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6242 comm=syz-executor.1 05:59:11 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0xf, r1, 0x1}, 0x14}}, 0x0) 05:59:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 637.406816] Bluetooth: Frame is too long (len 36, expected len 4) 05:59:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 637.413564] Bluetooth: hci4: connection err: -111 05:59:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x0, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x180, r1, 0x1}, 0x14}}, 0x0) 05:59:11 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 637.552261] Bluetooth: Frame is too long (len 36, expected len 4) [ 637.554545] Bluetooth: hci4: connection err: -111 [ 637.565330] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. 05:59:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x0, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0xec0, r1, 0x1}, 0x14}}, 0x0) [ 637.688368] Bluetooth: Frame is too long (len 36, expected len 4) [ 637.689633] Bluetooth: hci4: connection err: -111 05:59:11 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x0, 0xfffc, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x33fe0, r1, 0x1}, 0x14}}, 0x0) 05:59:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xb0000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 646.804335] Bluetooth: Frame is too long (len 36, expected len 4) [ 646.807172] Bluetooth: hci4: connection err: -111 [ 646.808374] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 646.822657] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. 05:59:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0xfffffdef, r1, 0x1}, 0x14}}, 0x0) 05:59:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:20 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9, 0x0, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 647.005120] Bluetooth: Frame is too long (len 36, expected len 4) [ 647.008184] Bluetooth: hci4: connection err: -111 05:59:30 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:30 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9, 0x0, 0x3}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x2}, 0x14}}, 0x0) 05:59:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:30 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 656.175316] Bluetooth: Frame is too long (len 36, expected len 4) 05:59:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 656.180158] Bluetooth: hci4: connection err: -111 05:59:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 656.248831] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 05:59:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 656.264956] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 05:59:30 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 656.310166] Bluetooth: Frame is too long (len 36, expected len 4) [ 656.311604] Bluetooth: hci4: connection err: -111 05:59:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x8}, 0x14}}, 0x0) 05:59:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:39 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:39 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{0x7, 0x4}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:39 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 665.455242] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 05:59:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 665.462790] Bluetooth: Frame is too long (len 36, expected len 4) [ 665.465229] Bluetooth: hci4: connection err: -111 05:59:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 665.475522] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 05:59:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:59:48 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x90}, @l2cap_cid_signaling={{0x8c}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x0, 0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x67}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x95) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x2}, 0x14}}, 0x0) [ 674.797816] Bluetooth: hci4: connection err: -111 05:59:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x90}, @l2cap_cid_signaling={{0x8c}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x0, 0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x67}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x95) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x3}, 0x14}}, 0x0) 05:59:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 674.917312] Bluetooth: hci4: connection err: -111 05:59:48 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x68636f69, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x90}, @l2cap_cid_signaling={{0x8c}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x0, 0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x67}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}}, @l2cap_info_req={{0xa, 0x39, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x95) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xd5000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 675.005722] Bluetooth: hci4: connection err: -111 05:59:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000040, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 05:59:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x696f6368, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:48 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) [ 675.101752] Bluetooth: Frame is too long (len 36, expected len 4) [ 675.103529] Bluetooth: hci4: connection err: -111 05:59:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x4}, 0x14}}, 0x0) 05:59:58 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 05:59:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:58 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xce000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x40000020, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 05:59:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8020000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 684.115115] Bluetooth: Frame is too long (len 36, expected len 4) [ 684.116470] Bluetooth: hci4: connection err: -111 05:59:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 06:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="effdffff190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xc7000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x8}, 0x14}}, 0x0) 06:00:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8030000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 695.125747] Bluetooth: Frame is too long (len 36, expected len 4) [ 695.133015] Bluetooth: hci4: connection err: -111 06:00:09 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xc5000000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:09 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 06:00:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x9}, 0x14}}, 0x0) 06:00:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8040000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 695.262438] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6545 comm=syz-executor.3 [ 695.266531] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6545 comm=syz-executor.3 [ 695.327169] Bluetooth: Frame is too long (len 36, expected len 4) [ 695.335661] Bluetooth: hci4: connection err: -111 06:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0xf}, 0x14}}, 0x0) 06:00:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8080000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 06:00:18 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8090000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 704.334267] Bluetooth: Frame is too long (len 36, expected len 4) [ 704.335977] Bluetooth: hci4: connection err: -111 06:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320", 0x2}}}, 0xd) 06:00:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80f0000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:18 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x60}, 0x14}}, 0x0) 06:00:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 704.474160] Bluetooth: Frame is too long (len 36, expected len 4) [ 704.475343] Bluetooth: hci4: connection err: -111 [ 704.512977] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. 06:00:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x300}, 0x14}}, 0x0) 06:00:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8ae0000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:27 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:27 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(0x0, 0x0) [ 713.634996] Bluetooth: Frame is too long (len 36, expected len 4) [ 713.648430] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.654740] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. 06:00:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8f00000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(0x0, 0x0) 06:00:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x900}, 0x14}}, 0x0) 06:00:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 724.790068] Bluetooth: Frame is too long (len 36, expected len 4) 06:00:38 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(0x0, 0x0) 06:00:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0xf00}, 0x14}}, 0x0) [ 725.007563] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.014950] Bluetooth: Frame is too long (len 36, expected len 4) 06:00:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:39 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320"}}}, 0xd) 06:00:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 725.216756] Bluetooth: Frame is too long (len 36, expected len 4) [ 725.218020] Bluetooth: hci4: connection err: -111 [ 725.225314] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 06:00:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:53 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320"}}}, 0xd) 06:00:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x6000}, 0x14}}, 0x0) 06:00:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="effdffff190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 739.885608] Bluetooth: Frame is too long (len 36, expected len 4) [ 739.887184] Bluetooth: hci4: connection err: -111 06:00:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:00:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xffb5}, @l2cap_cid_signaling={{}, [@l2cap_disconn_rsp={{}, {0x7}}, @l2cap_conn_rsp={{}, {0x0, 0x9}}, @l2cap_info_rsp={{}, {0x0, 0x0, "8ef38d10a282596a9c142094cca54c258ddb1f0d60d45ecac98dd64b1c14607c1b8b09c11c26ef855e35a4382ab843510a3bf444d19ef3fce4b785734546ff0de3f7a814f5413feef3f99c59946958c1a085aed15c479c347502859b8f50df901beffb"}}, @l2cap_create_chan_req, @l2cap_info_req={{0xa, 0x39}}, @l2cap_info_req]}}, 0x29) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "cac320"}}}, 0xd) 06:00:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:00:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x30000}, 0x14}}, 0x0) [ 740.128954] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6725 comm=syz-executor.0 [ 740.137393] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6725 comm=syz-executor.0 [ 740.156515] Bluetooth: Frame is too long (len 36, expected len 4) [ 740.158625] Bluetooth: hci4: connection err: -111 06:01:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="effdffff190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800ae00190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x80000}, 0x14}}, 0x0) 06:01:04 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 750.691972] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 750.775354] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6760 comm=syz-executor.6 06:01:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8020000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x1000000}, 0x14}}, 0x0) [ 750.966689] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 750.974363] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 750.987973] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:01:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x2000000}, 0x14}}, 0x0) 06:01:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="effdffff190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8030000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:15 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 762.058872] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 762.092013] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.6'. [ 762.098380] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.104899] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 762.105453] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.114472] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x3000000}, 0x14}}, 0x0) [ 762.184320] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6808 comm=syz-executor.2 06:01:16 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000200190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8040000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 762.190168] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6808 comm=syz-executor.2 06:01:16 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="e03f0300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 762.256248] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.6'. [ 762.264478] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="effdffff190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x4000000}, 0x14}}, 0x0) 06:01:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8080000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:26 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000400190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 772.755410] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 06:01:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8090000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:26 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 772.827776] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6852 comm=syz-executor.4 [ 772.856048] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 772.859945] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 772.860422] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=6852 comm=syz-executor.4 [ 772.939191] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80f0000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x9000000}, 0x14}}, 0x0) 06:01:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000800190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 781.851966] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. [ 781.856836] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.6'. [ 781.875177] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 781.879974] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 781.888361] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 06:01:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0xf000000}, 0x14}}, 0x0) 06:01:35 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8b00000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:35 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x60000000}, 0x14}}, 0x0) 06:01:35 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 782.158945] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. 06:01:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0xfcffffff}, 0x14}}, 0x0) 06:01:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8f00000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 790.592744] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 790.598059] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 06:01:44 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8020000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0xffffff7f}, 0x14}}, 0x0) 06:01:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 790.655008] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. 06:01:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800ae00190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 790.694459] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 06:01:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 06:01:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0xfffffffc}, 0x14}}, 0x0) 06:01:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 06:01:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 792.022182] kworker/u10:3 (112) used greatest stack depth: 23824 bytes left 06:01:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) 06:01:56 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8030000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000003190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:01:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8020000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 06:01:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 802.920670] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 06:01:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8030000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:01:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 06:02:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000009190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 06:02:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8002000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8040000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8040000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x3}, 0x14}}, 0x0) [ 813.736316] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 813.747286] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 06:02:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 06:02:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8080000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8020000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8080000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800b000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x4}, 0x14}}, 0x0) 06:02:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800000f190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 06:02:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000ae190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8030000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8090000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8090000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x8}, 0x14}}, 0x0) 06:02:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x9}, 0x14}}, 0x0) 06:02:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000f0190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80f0000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 06:02:18 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80f0000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001b0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8040000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8020000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}}, 0x0) 06:02:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8080000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8ce0000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001d0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0xf}, 0x14}}, 0x0) 06:02:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8d50000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 834.429952] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7099 comm=syz-executor.1 [ 834.430921] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 06:02:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8f00000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 834.441941] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7099 comm=syz-executor.1 06:02:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8090000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x60}, 0x14}}, 0x0) 06:02:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 06:02:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8030000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8f00000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80f0000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 834.667342] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.676700] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.711739] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.723630] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. 06:02:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 06:02:38 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0) 06:02:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8c70000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x300}, 0x14}}, 0x0) 06:02:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8040000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000200190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:38 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 845.057020] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. 06:02:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x900}, 0x14}}, 0x0) 06:02:50 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8f00000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 06:02:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8080000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 06:02:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000400190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:02:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8090000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0xf00}, 0x14}}, 0x0) [ 857.017786] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 857.033398] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 06:02:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8002000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 06:02:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000800190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:50 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8002000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:02:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80f0000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x6000}, 0x14}}, 0x0) 06:03:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:00 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800ce00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800d500190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 06:03:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 866.996436] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 866.997745] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 06:03:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8002000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:01 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 867.097708] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8c50000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 06:03:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 867.287547] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa00"/30], 0xb8}}, 0x0) 06:03:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800c700190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8f00000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:09 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001b0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x30000}, 0x14}}, 0x0) 06:03:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800b000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001b0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 875.817598] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001d0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 06:03:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001d0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x80000}, 0x14}}, 0x0) 06:03:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000002190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 875.969784] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.974599] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.6'. [ 875.985818] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.990288] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.6'. [ 876.028395] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000003190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x1000000}, 0x14}}, 0x0) 06:03:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 06:03:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000003190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:19 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001b0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 885.247655] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.6'. [ 885.250064] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 885.272910] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. 06:03:19 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000200190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 06:03:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000009190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000004190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000200190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x2000000}, 0x14}}, 0x0) 06:03:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001d0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 885.477485] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 885.565942] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. 06:03:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800000f190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000009190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8002000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000400190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 06:03:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000020190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x3000000}, 0x14}}, 0x0) 06:03:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800000f190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:30 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 896.340906] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 896.350052] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 896.370243] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. 06:03:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000800190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x4000000}, 0x14}}, 0x0) 06:03:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) [ 896.532611] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000ae190001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x9000000}, 0x14}}, 0x0) 06:03:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000400190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000b0190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000200190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) 06:03:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800c500190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 908.378010] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000f0190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000800190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 06:03:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0xf000000}, 0x14}}, 0x0) 06:03:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 908.565185] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 908.575518] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 908.598676] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001b0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800d500190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x60000000}, 0x14}}, 0x0) 06:03:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000400190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) [ 917.247236] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7426 comm=syz-executor.1 [ 917.252503] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7426 comm=syz-executor.1 [ 917.256469] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 06:03:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001d0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000100001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) [ 917.314739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7434 comm=syz-executor.3 [ 917.353249] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 917.372570] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 917.374224] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:03:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0xfcffffff}, 0x14}}, 0x0) 06:03:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000280001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 917.427619] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 917.431961] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. 06:03:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 06:03:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000800190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:51 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 917.491455] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 917.500327] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. 06:03:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000003190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 06:03:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0xffffff7f}, 0x14}}, 0x0) 06:03:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000110001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:59 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800ce00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000200190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 925.455759] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. 06:03:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 925.486670] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 925.489901] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. 06:03:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0xfffffffc}, 0x14}}, 0x0) 06:03:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000009190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000300190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000120001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:03:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 06:03:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:03:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 925.645489] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 925.680949] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 925.688908] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 925.714109] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:04:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800c700190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:10 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 06:04:10 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000003190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 06:04:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800000f190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:04:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000400190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 936.507309] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 936.510716] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 06:04:10 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000009190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 936.548388] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:04:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800f000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000800190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000020190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000170001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:04:19 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800000f190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e000100"/56], 0xb8}}, 0x0) 06:04:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 945.990269] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:04:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000003190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 946.064745] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 06:04:20 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000d5190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000009190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000900190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 946.137135] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. 06:04:20 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000020190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 06:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000180001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:04:20 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000f0190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b800000f190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 946.274055] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.7'. [ 946.287956] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 946.304583] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 06:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 06:04:28 executing program 6: creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000ce190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000f0001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000f00190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000002190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 06:04:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000160001000000000000000000ac1414aa08000000000000c200000000ac1e000100000000000000000000002a9f08a1000000000000000000020010267dd5f33790ffff88d13eef3e065624ee9bad0a7c643cee6a99e00df35f2b2a028a58979920375836f742624d90629e107896bf47f6ba3cae743810551f4f022a59a017992ae86216ac3ef2178adcb3a93fedf13ed9f6e23167851c01b7d65aba410006e01082afbbea4f80c3ab4f811e71872bff"], 0xb8}}, 0x0) 06:04:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000020190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) [ 957.028694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 957.031773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 957.035550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 957.035671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 957.039418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.041738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 957.047365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 957.049367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 957.052518] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 957.052542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 957.160385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 957.170369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 957.172858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 957.181374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 957.189277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 957.191059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 957.193951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 957.195446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 957.200376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 957.202487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 957.207419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 957.207519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 957.209070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 957.226617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 957.231249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 957.232415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 957.234004] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 957.238322] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 957.246439] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 957.247565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 957.248709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 957.251932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 957.254370] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 957.256886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 957.281417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 957.287744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 957.291704] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 957.298647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 957.300954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 957.321473] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 958.112486] Failed to initialize the IGMP autojoin socket (err -2) [ 958.303538] Failed to initialize the IGMP autojoin socket (err -2) [ 958.360447] Failed to initialize the IGMP autojoin socket (err -2) [ 958.670782] Failed to initialize the IGMP autojoin socket (err -2) [ 958.710868] Failed to initialize the IGMP autojoin socket (err -2) [ 958.748931] Failed to initialize the IGMP autojoin socket (err -2) [ 958.768467] Failed to initialize the IGMP autojoin socket (err -2) [ 958.785003] Failed to initialize the IGMP autojoin socket (err -2) [ 959.124412] Bluetooth: hci1: command tx timeout [ 961.173229] Bluetooth: hci1: command tx timeout [ 961.435193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 961.437408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 961.441388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 961.446884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 961.449783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 961.635680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 961.639249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 961.640836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 961.645587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 961.648359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 961.697440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 961.703573] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 961.705682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 961.723320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 961.732246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 961.800980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 961.804887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.814243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 961.822386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.832388] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.838840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 961.841409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 961.856149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 961.862727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 961.865925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 961.867475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 961.872226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 961.873537] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 961.876033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.889394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 961.941872] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 961.942390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 961.944286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 961.950225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 961.953651] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 962.387993] Failed to initialize the IGMP autojoin socket (err -2) [ 962.683242] Failed to initialize the IGMP autojoin socket (err -2) [ 962.925691] Failed to initialize the IGMP autojoin socket (err -2) [ 962.942586] Failed to initialize the IGMP autojoin socket (err -2) [ 963.091227] Failed to initialize the IGMP autojoin socket (err -2) [ 963.221210] Bluetooth: hci1: command tx timeout [ 963.261657] Failed to initialize the IGMP autojoin socket (err -2) [ 963.311440] Failed to initialize the IGMP autojoin socket (err -2) [ 965.268232] Bluetooth: hci1: command tx timeout [ 965.731829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.734205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.738303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.742730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.746051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 966.054853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.058472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.062750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.067536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.070183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 966.121012] Failed to initialize the IGMP autojoin socket (err -2) [ 966.179667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 966.184506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 966.187330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 966.202337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 966.211053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 966.261799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 966.273243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 966.276344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 966.281864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 966.285924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 966.300027] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 966.301461] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 966.303152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 966.307487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 966.321222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 966.324894] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 966.326803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 966.338466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 966.340258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 966.342475] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 966.344895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 966.353351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 966.357123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 966.369495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 966.381681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 966.699879] Failed to initialize the IGMP autojoin socket (err -2) [ 967.078784] Failed to initialize the IGMP autojoin socket (err -2) [ 967.398331] Failed to initialize the IGMP autojoin socket (err -2) [ 967.414411] Failed to initialize the IGMP autojoin socket (err -2) [ 967.447676] Failed to initialize the IGMP autojoin socket (err -2) [ 967.590823] Failed to initialize the IGMP autojoin socket (err -2) [ 969.634948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 969.638525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 969.641374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 969.647609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 969.652896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 969.961558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 969.966811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 969.968757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 969.976319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 969.981513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 970.119281] Failed to initialize the IGMP autojoin socket (err -2) [ 970.276928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.280425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.284393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 970.289964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 970.298214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 970.352942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 970.373577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 970.381313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 970.392448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 970.394464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 970.417894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 970.423725] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.426940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.437742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.446234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.450362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.464244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.488011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.493359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 970.494862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 970.497250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 970.504485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 970.516362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 970.520667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 970.527232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 970.610788] Failed to initialize the IGMP autojoin socket (err -2) [ 971.322636] Failed to initialize the IGMP autojoin socket (err -2) [ 971.363847] Failed to initialize the IGMP autojoin socket (err -2) [ 971.439723] Failed to initialize the IGMP autojoin socket (err -2) [ 971.457310] Failed to initialize the IGMP autojoin socket (err -2) [ 971.469733] Failed to initialize the IGMP autojoin socket (err -2) [ 972.991506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 972.998840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 973.001385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 973.009550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 973.013288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.359944] Failed to initialize the IGMP autojoin socket (err -2) [ 973.663493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 973.667478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 973.668979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 973.672247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 973.674361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.863036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 973.866469] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 973.869210] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.871764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.873469] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 974.034996] Failed to initialize the IGMP autojoin socket (err -2) [ 974.181452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 974.185438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 974.187754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 974.193992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.194168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 974.196817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.196819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 974.198140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.205848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 974.206143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 974.208488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.209703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 974.211949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 974.213209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 974.219423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.252531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 974.263307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 974.272374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 974.278297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 974.287305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 974.356695] Failed to initialize the IGMP autojoin socket (err -2) [ 974.662761] Failed to initialize the IGMP autojoin socket (err -2) [ 974.805974] Failed to initialize the IGMP autojoin socket (err -2) [ 974.956812] Failed to initialize the IGMP autojoin socket (err -2) [ 974.960273] Failed to initialize the IGMP autojoin socket (err -2) [ 976.097894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.104483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.107032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.117823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.120820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.619870] Failed to initialize the IGMP autojoin socket (err -2) [ 976.958401] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 976.961361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 976.963685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 976.971593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 976.978351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.259642] Failed to initialize the IGMP autojoin socket (err -2) [ 977.440951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 977.442819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 977.444623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 977.445514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 977.446695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 977.448100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 977.451676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 977.453506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.465629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 977.468709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 977.572558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 977.579234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 977.580837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 977.582717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 977.584318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 977.654590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 977.666931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 977.673279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 977.674828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 977.679343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 977.686730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 977.696484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 977.697293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 977.709883] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 977.717363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 977.730310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 977.736887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 977.739123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 977.740158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 977.744177] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 978.013755] Failed to initialize the IGMP autojoin socket (err -2) [ 978.064978] Failed to initialize the IGMP autojoin socket (err -2) [ 978.114548] Failed to initialize the IGMP autojoin socket (err -2) [ 978.180163] Failed to initialize the IGMP autojoin socket (err -2) [ 978.196256] Bluetooth: hci0: command tx timeout [ 978.328300] Failed to initialize the IGMP autojoin socket (err -2) [ 978.350634] Failed to initialize the IGMP autojoin socket (err -2) [ 979.672833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.691668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.733383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.765306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.771645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 980.037732] Failed to initialize the IGMP autojoin socket (err -2) [ 980.245225] Bluetooth: hci0: command tx timeout [ 980.575502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 980.578936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 980.580758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 980.585519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 980.587568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 980.772642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 980.775509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 980.777363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 980.782302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 980.786430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 980.848010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 980.852414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 980.856368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 980.862379] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 980.865361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 980.979725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.982676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.986252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.989414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 981.000605] Failed to initialize the IGMP autojoin socket (err -2) [ 981.000738] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 981.005425] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 981.008489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 981.014176] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 981.018335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 981.021421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 981.022566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 981.028731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 981.030125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 981.034904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 981.041578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 981.597044] Failed to initialize the IGMP autojoin socket (err -2) [ 981.605373] Failed to initialize the IGMP autojoin socket (err -2) [ 981.720943] Failed to initialize the IGMP autojoin socket (err -2) [ 981.867940] Failed to initialize the IGMP autojoin socket (err -2) [ 981.872371] Failed to initialize the IGMP autojoin socket (err -2) [ 982.292124] Bluetooth: hci0: command tx timeout [ 982.762706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 982.767279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 982.769890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 982.773719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 982.775500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 983.005741] Failed to initialize the IGMP autojoin socket (err -2) [ 984.229514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 984.236194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 984.238571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 984.246763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 984.251598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 984.340321] Bluetooth: hci0: command tx timeout [ 984.429853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 984.433542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 984.441359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 984.446048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 984.449252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 984.501951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 984.509775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 984.510550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 984.516492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 984.517363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 984.520790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 984.523059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 984.538530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 984.553983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 984.554762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 984.562511] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 984.575847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 984.593049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 984.601773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 984.604842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.732890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 984.753878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 984.761406] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 984.781345] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 984.788984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 985.024808] Failed to initialize the IGMP autojoin socket (err -2) [ 985.291396] Failed to initialize the IGMP autojoin socket (err -2) [ 985.427759] Failed to initialize the IGMP autojoin socket (err -2) [ 985.457192] Failed to initialize the IGMP autojoin socket (err -2) [ 985.461328] Failed to initialize the IGMP autojoin socket (err -2) [ 985.623761] Failed to initialize the IGMP autojoin socket (err -2) [ 986.145487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.148961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.152748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.157660] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.162354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 986.500203] Failed to initialize the IGMP autojoin socket (err -2) [ 987.867538] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 987.870512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 987.873012] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 987.876154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 987.877885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 987.885221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 987.888267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 987.892420] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 987.899908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 987.901604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 988.006598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 988.011356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 988.018598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 988.028974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 988.031113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 988.033951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 988.046237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 988.056185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 988.078731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 988.083442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.104465] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 988.110960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 988.114001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 988.140732] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 988.145363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 988.150415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 988.152051] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 988.155530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 988.160369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 988.198443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 988.590710] Failed to initialize the IGMP autojoin socket (err -2) [ 988.747155] Failed to initialize the IGMP autojoin socket (err -2) [ 988.770916] Failed to initialize the IGMP autojoin socket (err -2) [ 988.849715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 988.850804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 988.859209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 988.860717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 988.863203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 988.869027] Failed to initialize the IGMP autojoin socket (err -2) [ 989.084625] Failed to initialize the IGMP autojoin socket (err -2) [ 989.136931] Failed to initialize the IGMP autojoin socket (err -2) [ 989.249385] Failed to initialize the IGMP autojoin socket (err -2) [ 991.134971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 991.137403] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 991.142778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 991.146537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 991.150432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 991.395532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 991.396914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 991.401477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 991.409057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 991.410773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 991.504878] Failed to initialize the IGMP autojoin socket (err -2) [ 991.609898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 991.611142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 991.615043] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 991.620480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 991.622700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 991.722920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.726987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 991.730962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.733267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 991.736536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.737818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 991.740244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 991.742057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.745734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 991.747163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 991.750613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 991.766362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 991.788303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 991.792677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 991.794672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.834750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 991.847298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 991.899333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 991.906796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 991.916363] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 991.993760] Failed to initialize the IGMP autojoin socket (err -2) [ 992.278584] Failed to initialize the IGMP autojoin socket (err -2) [ 992.342589] Failed to initialize the IGMP autojoin socket (err -2) [ 992.530363] Failed to initialize the IGMP autojoin socket (err -2) [ 992.531165] Failed to initialize the IGMP autojoin socket (err -2) [ 992.531844] Failed to initialize the IGMP autojoin socket (err -2) 2025/09/03 06:05:06 executor 5 failed 11 times: executor 5: exit status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 16: Device or resource busy) loop exited with status 67 VM DIAGNOSIS: 06:05:06 Registers: info registers vcpu 0 RAX=0000000000048000 RBX=ffff888045580000 RCX=0000000000000000 RDX=000000000004801e RSI=0000000000000000 RDI=ffff88806ce3c518 RBP=ffff888045580a58 RSP=ffff88803ecf7a78 R8 =0000000000000000 R9 =000000000000001e R10=0000000000000001 R11=0000000000000000 R12=ffff888045580a58 R13=0000000000008000 R14=0000000000000001 R15=0000000000040000 RIP=ffffffff8151bacc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d7000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f05cf90b260 CR3=0000000036c3f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000007493000 RBX=0000000007493000 RCX=ffffffff819c4bb9 RDX=dffffc0000000000 RSI=ffffffff819c4aee RDI=0000000000000006 RBP=0000000000000025 RSP=ffff888040abfa80 R8 =00007f493f015000 R9 =fffff9400003a498 R10=0000000000000025 R11=0000000000000001 R12=1ffff11008157f50 R13=0000000000000025 R14=ffffffffffffffff R15=ffffea00001d24c0 RIP=ffffffff819c4b03 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d7000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f493f009090 CR3=000000003796a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000