0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1232.225197] random: crng reseeded on system resumption 13:25:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602a"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x2f}, @l2cap_cid_signaling={{0x2b}, [@l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x34) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:25:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602a"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:36 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1241.102475] random: crng reseeded on system resumption 13:25:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x2f}, @l2cap_cid_signaling={{0x2b}, [@l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x34) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:25:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1241.188308] random: crng reseeded on system resumption 13:25:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1241.255194] random: crng reseeded on system resumption 13:25:36 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1241.337158] random: crng reseeded on system resumption 13:25:44 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:25:44 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:25:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602a"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 13:25:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602a"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) [ 1249.629984] random: crng reseeded on system resumption [ 1249.637605] random: crng reseeded on system resumption 13:25:44 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:25:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1249.693645] random: crng reseeded on system resumption 13:25:44 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1249.752398] random: crng reseeded on system resumption 13:25:44 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:25:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:45 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:45 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1249.873159] random: crng reseeded on system resumption [ 1249.912058] random: crng reseeded on system resumption 13:25:45 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:25:45 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1249.933226] random: crng reseeded on system resumption 13:25:45 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1250.049471] random: crng reseeded on system resumption [ 1250.070955] random: crng reseeded on system resumption 13:25:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602a"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:25:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:53 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:25:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:25:54 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efca"}, 0x3b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1258.822263] random: crng reseeded on system resumption [ 1258.836195] random: crng reseeded on system resumption [ 1258.872169] random: crng reseeded on system resumption 13:25:54 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efca"}, 0x3b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:02 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:26:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 13:26:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:02 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:02 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efca"}, 0x3b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1267.351819] random: crng reseeded on system resumption 13:26:02 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b50152"}, 0x56) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1267.409615] random: crng reseeded on system resumption [ 1267.425617] random: crng reseeded on system resumption 13:26:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:02 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:02 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) [ 1267.497917] random: crng reseeded on system resumption [ 1267.518751] random: crng reseeded on system resumption 13:26:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:02 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:02 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b50152"}, 0x56) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1267.617371] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1267.617621] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1267.618865] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1267.621166] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1267.622189] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1267.623359] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1267.623496] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1267.626555] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1267.628724] Bluetooth: hci3: ACL packet for unknown connection handle 200 13:26:02 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1267.685609] random: crng reseeded on system resumption [ 1267.713227] random: crng reseeded on system resumption [ 1269.671739] Bluetooth: hci3: command 0x0406 tx timeout 13:26:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:12 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b50152"}, 0x56) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:12 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:26:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1277.344405] random: crng reseeded on system resumption [ 1277.345984] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1277.347564] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1277.349751] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1277.352439] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1277.353412] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1277.354588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1277.354842] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1277.357329] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1277.358588] Bluetooth: hci3: ACL packet for unknown connection handle 200 13:26:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x60}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3"}, 0x64) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1277.402300] random: crng reseeded on system resumption 13:26:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1277.533593] random: crng reseeded on system resumption [ 1277.541482] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1277.541797] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1277.543509] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1277.550275] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1277.553715] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1277.556367] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1277.559916] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1277.566015] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1277.566146] Bluetooth: hci3: ACL packet for unknown connection handle 200 13:26:12 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x60}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3"}, 0x64) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1277.610817] random: crng reseeded on system resumption 13:26:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1277.736109] random: crng reseeded on system resumption [ 1277.790558] random: crng reseeded on system resumption [ 1279.591755] Bluetooth: hci3: command 0x0406 tx timeout 13:26:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x60}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3"}, 0x64) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1286.201373] random: crng reseeded on system resumption 13:26:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x67}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f938"}, 0x6b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1286.275407] random: crng reseeded on system resumption 13:26:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0x0, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1286.295138] random: crng reseeded on system resumption [ 1286.327278] random: crng reseeded on system resumption 13:26:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x67}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f938"}, 0x6b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1286.463126] random: crng reseeded on system resumption [ 1286.514783] random: crng reseeded on system resumption 13:26:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) 13:26:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:30 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x67}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f938"}, 0x6b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1294.998891] random: crng reseeded on system resumption [ 1295.006211] random: crng reseeded on system resumption 13:26:30 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c8"}, 0x6e) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:30 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c8"}, 0x6e) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:30 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c8"}, 0x6e) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1295.249160] random: crng reseeded on system resumption 13:26:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) 13:26:30 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:26:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1295.480526] random: crng reseeded on system resumption 13:26:39 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6c}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868eb"}, 0x70) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efca"}, 0x3b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:26:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:39 executing program 3: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x39b202, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:26:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1303.902167] random: crng reseeded on system resumption [ 1303.931968] random: crng reseeded on system resumption [ 1303.953129] random: crng reseeded on system resumption 13:26:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:39 executing program 3: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x39b202, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:26:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efca"}, 0x3b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:39 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6c}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868eb"}, 0x70) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) 13:26:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1304.100497] random: crng reseeded on system resumption 13:26:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efca"}, 0x3b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:39 executing program 3: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x39b202, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:26:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b50152"}, 0x56) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1304.199441] random: crng reseeded on system resumption [ 1304.245044] random: crng reseeded on system resumption 13:26:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6c}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868eb"}, 0x70) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b50152"}, 0x56) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1313.665047] random: crng reseeded on system resumption 13:26:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b50152"}, 0x56) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) 13:26:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1313.939987] random: crng reseeded on system resumption 13:26:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x60}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3"}, 0x64) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:26:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:57 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x39b202, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:26:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:26:57 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1322.616429] random: crng reseeded on system resumption 13:26:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1322.681043] random: crng reseeded on system resumption [ 1322.714567] random: crng reseeded on system resumption 13:26:57 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) 13:26:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) 13:26:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x60}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3"}, 0x64) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1322.788010] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1322.788090] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1322.791957] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1322.794263] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1322.795296] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1322.796398] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1322.796547] Bluetooth: hci3: ACL packet for unknown connection handle 201 13:26:58 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:26:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:26:58 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) 13:26:58 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x39b202, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) [ 1322.889060] random: crng reseeded on system resumption 13:26:58 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x60}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3"}, 0x64) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1322.947309] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1322.949519] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1322.953082] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1322.958423] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1322.960963] random: crng reseeded on system resumption [ 1322.962282] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1322.966218] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1322.969378] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1322.973154] random: crng reseeded on system resumption [ 1325.031826] Bluetooth: hci3: command 0x0406 tx timeout 13:27:07 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = fork() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x90, 0x1f, 0xf5, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x5}, 0x2040, 0xfffffffffffffffc, 0xfffffffd, 0x3f39f660a2f95cec, 0x3f, 0x7b62, 0x8, 0x0, 0xffff, 0x0, 0xb}, r0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x80, 0xfb, 0x9, 0x0, 0x100000000, 0x4080, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x2, 0x2, 0x8, 0x9, 0x0, 0x385, 0x0, 0x1, 0x0, 0xd1}, r0, 0x5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0xdf140c58aed77f99) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940), 0x80800) io_setup(0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x39b202, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f0000000000000400020000000000000005000000", 0x28, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)) 13:27:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:27:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) 13:27:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) 13:27:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x0, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) 13:27:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x67}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f938"}, 0x6b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1332.035071] random: crng reseeded on system resumption 13:27:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x67}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f938"}, 0x6b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1332.068414] random: crng reseeded on system resumption 13:27:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1332.095690] random: crng reseeded on system resumption 13:27:07 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) 13:27:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x0, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x0, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:07 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x67}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f938"}, 0x6b) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1332.272050] random: crng reseeded on system resumption 13:27:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1332.313973] random: crng reseeded on system resumption [ 1332.404977] random: crng reseeded on system resumption 13:27:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x0, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) (fail_nth: 1) 13:27:16 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c8"}, 0x6e) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:16 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:16 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:16 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="232d86e7ade8bb5307cfd7bb85c77fa0043b0a000075e941340104000000000400006e717790c45f8e87d896c3105c13312077ca3b7df222748020bc0a6f3adba65d4c9487d7207c91f6193c6274e2142f1b372ff25cfe3fcb8b9d8456fae3b9937cf78b4afad6fd96086e91a531090952f21c8771c4"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x40}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="d0b46c5757f3f7adadc2ee4dbf755513a6f6d01357840a090fa68714503bccfa3185a2dbf70281d8bbc2839818d60b16c6fd8b23ace1f4afc3941b66812dbcf7bed40b004ebbac08c6d2bb2ce911f9eeb8b661437b78530704d1e5ab63485ef98f1c615672f95651f774a74f077d96f2c982cc785fbdf82dbef3f9b6ae8e"], 0x7) 13:27:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1341.467259] Bluetooth: hci2: hardware error 0x40 [ 1341.520474] FAULT_INJECTION: forcing a failure. [ 1341.520474] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1341.522389] CPU: 1 UID: 0 PID: 21382 Comm: syz-executor.2 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1341.522418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.522432] Call Trace: [ 1341.522439] [ 1341.522448] dump_stack_lvl+0xfa/0x120 [ 1341.522502] should_fail_ex+0x4d7/0x5e0 [ 1341.522534] _copy_to_user+0x32/0xd0 [ 1341.522563] simple_read_from_buffer+0xe0/0x180 [ 1341.522591] proc_fail_nth_read+0x18a/0x240 [ 1341.522623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1341.522661] ? security_file_permission+0x22/0x90 [ 1341.522695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1341.522725] vfs_read+0x1eb/0xc70 [ 1341.522758] ? __pfx_vfs_read+0x10/0x10 [ 1341.522787] ? lock_release+0xc8/0x290 [ 1341.522818] ? __fget_files+0x20d/0x3b0 [ 1341.522854] ksys_read+0x121/0x240 [ 1341.522881] ? __pfx_ksys_read+0x10/0x10 [ 1341.522918] do_syscall_64+0xbf/0x390 [ 1341.522946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.522968] RIP: 0033:0x7fd511e2469c [ 1341.522984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1341.523005] RSP: 002b:00007fd50f3e7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1341.523027] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fd511e2469c [ 1341.523042] RDX: 000000000000000f RSI: 00007fd50f3e71e0 RDI: 0000000000000004 [ 1341.523055] RBP: 00007fd50f3e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.523069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.523082] R13: 00007fffe258b6ff R14: 00007fd50f3e7300 R15: 0000000000022000 [ 1341.523111] 13:27:16 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1341.574529] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1341.578418] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1341.583769] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1341.586040] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1341.588072] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1341.592585] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1341.596869] Bluetooth: hci3: ACL packet for unknown connection handle 201 13:27:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) [ 1341.609462] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1341.611710] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1341.648713] random: crng reseeded on system resumption 13:27:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 1) 13:27:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c8"}, 0x6e) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:16 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:16 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="e86bd5de042e175f6c4397"], 0x7) [ 1341.786243] FAULT_INJECTION: forcing a failure. [ 1341.786243] name failslab, interval 1, probability 0, space 0, times 1 [ 1341.788149] CPU: 0 UID: 0 PID: 21503 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1341.788180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.788193] Call Trace: [ 1341.788201] [ 1341.788209] dump_stack_lvl+0xfa/0x120 [ 1341.788241] should_fail_ex+0x4d7/0x5e0 [ 1341.788272] ? getname_flags.part.0+0x48/0x540 [ 1341.788294] should_failslab+0xc2/0x120 [ 1341.788326] kmem_cache_alloc_noprof+0x72/0x680 [ 1341.788352] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1341.788382] ? getname_flags.part.0+0x48/0x540 [ 1341.788402] ? do_user_addr_fault+0x43a/0x12b0 [ 1341.788429] getname_flags.part.0+0x48/0x540 [ 1341.788454] __x64_sys_mkdir+0xdb/0x140 [ 1341.788484] do_syscall_64+0xbf/0x390 [ 1341.788512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.788535] RIP: 0033:0x7f6c3639bc27 [ 1341.788552] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.788573] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1341.788594] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1341.788620] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1341.788634] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1341.788653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1341.788666] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1341.788695] [ 1341.865519] random: crng reseeded on system resumption 13:27:17 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1341.868466] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1341.869692] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1341.871901] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1341.874359] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1341.876473] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1341.878849] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1341.882042] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1341.890075] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1341.896257] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1343.527705] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1343.911735] Bluetooth: hci3: command 0x0406 tx timeout 13:27:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 2) 13:27:24 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:27:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c8"}, 0x6e) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:24 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x78}, "efe22b106fcaf3eb0c2f0fcc63305dc21d3406c87a97c0f75128eb8bf840e97460a37cba63d5087b162d64fc2df17c694a83faa5d374397158f72f30cc9facc5ecb54ea7fc0a557fc9a863a7d5cf0bac58a8547acadc4c2fa946479521dc6bff60fe489a81cb8103a05c600bd4117766d12ea27c4078bc1c"}}, 0x7b) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{}, {@any, 0x0, 0x6, 0x6}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa) 13:27:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:27:25 executing program 2: keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/110, 0x6e) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x5, 0xff, 0x7, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x3b, 0x29e2}, 0x10001, 0x0, 0x5, 0x3, 0x401, 0xffff, 0x1, 0x0, 0x1, 0x0, 0x7fff}, 0x0, 0xb, r2, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x35, 0x61, 0x61, 0x33, 0x63, 0x66, 0x30, 0x63, 0x32, 0x33, 0x39, 0x62, 0x63, 0x63, 0x63, 0x63]}, &(0x7f0000000240)={0x0, "7e85be21f2c9f2f35f6d6877b362d75bc49c954c69401f910493fc6521a4b0e20a398b9e78fea466ea1242ee984b1a4e6b4687d42ef70022821fbe72bfc266e3", 0x2a}, 0x48, 0xfffffffffffffffe) [ 1349.799043] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1349.799133] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1349.800641] Bluetooth: hci3: ACL packet for unknown connection handle 2681 [ 1349.803318] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1349.804743] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1349.805960] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1349.806109] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1349.809040] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 1349.809185] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1349.817359] No source specified [ 1349.847047] random: crng reseeded on system resumption 13:27:25 executing program 3: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="e86bd5de042e175f6c4397"], 0x7) 13:27:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 3) 13:27:25 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6c}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868eb"}, 0x70) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:25 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:25 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1349.962072] FAULT_INJECTION: forcing a failure. [ 1349.962072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.963074] CPU: 1 UID: 0 PID: 21905 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1349.963091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.963099] Call Trace: [ 1349.963104] [ 1349.963109] dump_stack_lvl+0xfa/0x120 [ 1349.963130] should_fail_ex+0x4d7/0x5e0 [ 1349.963149] strncpy_from_user+0x3b/0x2f0 [ 1349.963171] getname_flags.part.0+0x8d/0x540 [ 1349.963187] __x64_sys_mkdir+0xdb/0x140 [ 1349.963205] do_syscall_64+0xbf/0x390 [ 1349.963222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.963236] RIP: 0033:0x7f6c3639bc27 [ 1349.963246] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.963258] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1349.963271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1349.963280] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1349.963288] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1349.963296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1349.963303] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1349.963320] [ 1350.042454] random: crng reseeded on system resumption [ 1351.847773] Bluetooth: hci3: command 0x0406 tx timeout 13:27:33 executing program 3: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="e86bd5de042e175f6c4397"], 0x7) 13:27:33 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:27:33 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, 0x0) r2 = getegid() setfsgid(r2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) setfsgid(r1) r3 = msgget$private(0x0, 0x401) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/185, 0xb9}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2202) msgctl$IPC_SET(r3, 0x1, &(0x7f00000006c0)={{0x1, 0xee00, r4, r5, r1, 0x8, 0x80}, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x9, 0x2be00, 0x7ff, 0xd24d, 0x9, 0xffffffffffffffff, r6}) 13:27:33 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040d07030000"], 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:27:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 4) 13:27:33 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6c}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868eb"}, 0x70) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1358.245563] FAULT_INJECTION: forcing a failure. [ 1358.245563] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.246603] CPU: 1 UID: 0 PID: 22017 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1358.246620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1358.246628] Call Trace: [ 1358.246633] [ 1358.246638] dump_stack_lvl+0xfa/0x120 [ 1358.246663] should_fail_ex+0x4d7/0x5e0 [ 1358.246682] ? __d_alloc+0x31/0xa10 [ 1358.246703] should_failslab+0xc2/0x120 [ 1358.246723] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 1358.246738] ? __d_lookup+0x255/0x490 [ 1358.246755] ? __d_alloc+0x31/0xa10 [ 1358.246771] __d_alloc+0x31/0xa10 [ 1358.246791] d_alloc+0x4a/0x1e0 [ 1358.246809] lookup_one_qstr_excl+0x174/0x270 [ 1358.246822] ? mnt_want_write+0x153/0x420 [ 1358.246837] filename_create+0x1ca/0x480 [ 1358.246852] ? __pfx_filename_create+0x10/0x10 [ 1358.246866] ? __virt_addr_valid+0x2e8/0x5d0 [ 1358.246895] do_mkdirat+0x9a/0x3d0 [ 1358.246913] ? __pfx_do_mkdirat+0x10/0x10 [ 1358.246935] __x64_sys_mkdir+0xf3/0x140 [ 1358.246953] do_syscall_64+0xbf/0x390 [ 1358.246969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.246983] RIP: 0033:0x7f6c3639bc27 [ 1358.246993] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.247005] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1358.247018] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1358.247026] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1358.247034] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1358.247041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1358.247049] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1358.247066] [ 1358.311432] random: crng reseeded on system resumption 13:27:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 5) 13:27:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:33 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6c}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868eb"}, 0x70) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1358.417640] No source specified [ 1358.438772] random: crng reseeded on system resumption [ 1358.451296] random: crng reseeded on system resumption 13:27:33 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 6) 13:27:33 executing program 2: getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004500)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/144, 0x90}, {&(0x7f0000001200)=""/168, 0xa8}, {&(0x7f00000012c0)=""/160, 0xa0}], 0x5}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001480)=""/254, 0xfe}], 0x1}}, {{&(0x7f00000015c0), 0x6e, &(0x7f0000001700)=[{&(0x7f0000001640)=""/144, 0x90}], 0x1}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000002c40)=[{&(0x7f00000017c0)=""/9, 0x9}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/143, 0x8f}, {&(0x7f00000028c0)=""/77, 0x4d}, {&(0x7f0000002940)=""/10, 0xa}, {&(0x7f0000002980)=""/175, 0xaf}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/163, 0xa3}], 0xa, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000002e40)=""/70, 0x46}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/126, 0x7e}, {&(0x7f0000003f40)=""/172, 0xac}, {&(0x7f0000004000)=""/208, 0xd0}, {&(0x7f0000004100)=""/172, 0xac}, {&(0x7f00000041c0)=""/67, 0x43}], 0x7}}, {{&(0x7f00000042c0), 0x6e, &(0x7f0000004400)=[{&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/122, 0x7a}], 0x2, &(0x7f0000004440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x6, 0x10122, &(0x7f0000004680)={0x77359400}) 13:27:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:27:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:33 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, 0x0) r2 = getegid() setfsgid(r2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) setfsgid(r1) r3 = msgget$private(0x0, 0x401) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/185, 0xb9}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2202) msgctl$IPC_SET(r3, 0x1, &(0x7f00000006c0)={{0x1, 0xee00, r4, r5, r1, 0x8, 0x80}, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x9, 0x2be00, 0x7ff, 0xd24d, 0x9, 0xffffffffffffffff, r6}) [ 1358.565143] FAULT_INJECTION: forcing a failure. [ 1358.565143] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.566851] CPU: 0 UID: 0 PID: 22339 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1358.566892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1358.566910] Call Trace: [ 1358.566921] [ 1358.566933] dump_stack_lvl+0xfa/0x120 [ 1358.566967] should_fail_ex+0x4d7/0x5e0 [ 1358.566998] ? ext4_alloc_inode+0x28/0x600 [ 1358.567018] should_failslab+0xc2/0x120 [ 1358.567051] kmem_cache_alloc_lru_noprof+0x76/0x680 [ 1358.567083] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 1358.567106] ? ext4_alloc_inode+0x28/0x600 [ 1358.567125] ext4_alloc_inode+0x28/0x600 [ 1358.567146] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 1358.567165] alloc_inode+0x67/0x250 [ 1358.567200] new_inode+0x1e/0x160 [ 1358.567221] __ext4_new_inode+0x35d/0x4d70 [ 1358.567261] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1358.567298] ? __pfx___ext4_new_inode+0x10/0x10 [ 1358.567333] ? __pfx_avc_has_perm+0x10/0x10 [ 1358.567363] ? __pfx___dquot_initialize+0x10/0x10 [ 1358.567402] ext4_mkdir+0x331/0xb30 [ 1358.567436] ? __pfx_ext4_mkdir+0x10/0x10 [ 1358.567458] ? security_inode_permission+0x72/0xe0 [ 1358.567494] vfs_mkdir+0x59a/0x8d0 [ 1358.567523] do_mkdirat+0x19f/0x3d0 [ 1358.567553] ? __pfx_do_mkdirat+0x10/0x10 [ 1358.567592] __x64_sys_mkdir+0xf3/0x140 [ 1358.567622] do_syscall_64+0xbf/0x390 [ 1358.567660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.567682] RIP: 0033:0x7f6c3639bc27 [ 1358.567699] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.567720] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1358.567742] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1358.567757] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1358.567770] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1358.567784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1358.567797] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1358.567827] [ 1358.572130] random: crng reseeded on system resumption 13:27:33 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:27:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="fd28141c8a00"], 0xd) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x7) 13:27:42 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:27:42 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:27:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:42 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:42 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 7) 13:27:42 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 1366.930903] random: crng reseeded on system resumption [ 1366.960784] No source specified 13:27:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1367.037541] random: crng reseeded on system resumption [ 1367.059999] random: crng reseeded on system resumption 13:27:51 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:51 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x101000, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x10104) r6 = syz_open_dev$mouse(&(0x7f0000000940), 0x4, 0x1) io_submit(0x0, 0x7, &(0x7f00000009c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="499ba8d85ba419fa782eca4150e13f5e47b36ecc116dc1bb53be09ef044ba3b1a22dbc45dacceef8e3c28d", 0x2b, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, 0xffffffffffffffff, &(0x7f0000000300)="881f88f720f7e5d3873fcc0c4f9796c4eff81d1ba2a2aa6c732c282343a3675d92f00935b0f201c755393cfec0275467c313668447351a9278b21430d67cc5bd9a19a3dbb23cafada8fddd4dd38556d312b69feb975e4e5344a6fe7696f8884a0408862321c452b19389a23d550340af6cbab9ef7e1b3e891dfd2b062d55cdcc6f21f90b4914e5830ef2d780058e87fb8f715cbd95e7b31e827b349bac8ef03e8f154b0482ece9", 0xa7, 0x9, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000480)="118476a83a716bb9a15120d82507d5843b90c36b57ca46cc6e6118e24462e3132e87b7bf8e80d4", 0x27, 0x80000001, 0x0, 0x4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xb6fc, r1, &(0x7f0000000500)="034e922ba80525383a979e5284f7bef2f1574d4bbe53adc0b38d84b51539b20a5d8d2bf7866e3cdc7a450bda45c3f5b6c957682f7732746587f2cab7c10e42145315215393dbbe8e7d43250e21e16c3ee56c20d8f79c1dff49f599076f2b32123843281ee883e96fa0806115ca9fa4fb10a6c9bf5aaef49e82bced16b227675c1504a818c67d9043598be08c951590", 0x8f, 0x17c3, 0x0, 0x1, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000680)="1414fd87a550d371e391d23f0a70e1bb838f12edc011b801be3411379e3646", 0x1f, 0x7bb2a710}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000700)="7119f673f525dbeee348e3bd06e47cc2878d518b6d754f6bdb387245df01be4c5cb1173b42fcf20f7571aa1035b85f43b6f52013831302dfceeb0d70852a14d2e1354f225aa1d63bb36b02ee2ae82221168f2706358f67a82d05bf0b6794de47a681966097bce46398c935b6266328254dadce8a26895b9a94376f48561e4657b393502862cdd087a5849ae811e34d669d8d2f58b55e33fe8ebdc38fd824aedd0a7e0a4439cbad7fd5d3533d23fe90c6a4f794d09621e6a40b6e1fc53b7e1ca2194d", 0xc2, 0xb1a6, 0x0, 0x3, r4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f00000008c0)="0819ed467dcdf22164686fa5abeaa29f99026cd127d3a6c9b47d490ea544149b41ea88cc5a97ce94610f5220df36ad9d79f6a98391ad6ba26a54a801477d8b2f10da6cb9c04c8ab5122a05249159122d87b1553668f911d77ccef04322062f024fd21dc6d98095", 0x67, 0xb925, 0x0, 0x2, r6}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="f0af1238015936b13981bf855010520ea9a850ec5eff2f58e83c4275d06ef4c107a0df66ed5c7d0024c116536a10a4d1a16333affcd61454d4a405e100d233281a31d5fd4eb37a89bd033246b2962d7410cecfecf981891ef79a3760896a9f854f152214340e825dc54fdaf4ce48131851c282ce542500551ee0772ace12b153aefe8381642dca025131214cbadced7165e11cd213b421251ebdd75a83d6d2b9d5f8e2fcc71f95746e709c78b71bf9842d6caf81", 0xb4, 0x7}], 0x2010020, &(0x7f0000000200)=ANY=[@ANYBLOB="696e6f64655f7265046461686561645f626c6b733d30783030303030303030303030303038303004746573745f64756d6d798100000000000000696f6e2c746573745f64756d6d795f656e6372797074e96f6e2c7569643e", @ANYRESDEC=r7, @ANYBLOB=',\x00']) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6d706f6c3d696c7465726c656176653d72656c61746976652c6769643d27f3fabddaf2021bfa6f5a62dcdab0276a9f1adfcd1cc52de19b1232f074509cd6a180bdbd938dd470016ad6e5a3a4bf910866945dd4419e33974a37600d3ef04e86d07743588eb0ed7150789dc4e5d5156b1287a24ff9d5679a1fb269c92a3c2b383513f93b5a885a8c4ed412036b58bfcdffbf47750139f23d28281ad2ef04b2de29bf9aaea292ffabfaff0300000000000022e3d4b1093cba6941ae2724a48bfae0f01cf691dbdf45873591", @ANYRESHEX=r9, @ANYBLOB=',\x00']) setfsgid(r9) 13:27:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:51 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_rsp={{0x18, 0x7f, 0x18}, {0x6, 0x81, 0x20, 0x0, [0x5, 0x9, 0xb4, 0x0, 0x7c7f, 0x40, 0xffc0, 0x4]}}}}, 0x25) 13:27:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 8) 13:27:51 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:27:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1376.624430] FAULT_INJECTION: forcing a failure. [ 1376.624430] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.625482] CPU: 1 UID: 0 PID: 22991 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1376.625498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.625505] Call Trace: [ 1376.625510] [ 1376.625514] dump_stack_lvl+0xfa/0x120 [ 1376.625534] should_fail_ex+0x4d7/0x5e0 [ 1376.625552] ? security_inode_alloc+0x3e/0x130 [ 1376.625566] should_failslab+0xc2/0x120 [ 1376.625585] kmem_cache_alloc_noprof+0x72/0x680 [ 1376.625598] ? __pfx_map_id_range_down+0x10/0x10 [ 1376.625617] ? security_inode_alloc+0x3e/0x130 [ 1376.625630] security_inode_alloc+0x3e/0x130 [ 1376.625650] inode_init_always_gfp+0xc94/0xff0 [ 1376.625670] alloc_inode+0x8d/0x250 [ 1376.625688] new_inode+0x1e/0x160 [ 1376.625699] __ext4_new_inode+0x35d/0x4d70 [ 1376.625722] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1376.625743] ? __pfx___ext4_new_inode+0x10/0x10 [ 1376.625761] ? __pfx_avc_has_perm+0x10/0x10 [ 1376.625778] ? __pfx___dquot_initialize+0x10/0x10 [ 1376.625797] ext4_mkdir+0x331/0xb30 [ 1376.625815] ? __pfx_ext4_mkdir+0x10/0x10 [ 1376.625827] ? security_inode_permission+0x72/0xe0 [ 1376.625846] vfs_mkdir+0x59a/0x8d0 [ 1376.625862] do_mkdirat+0x19f/0x3d0 [ 1376.625879] ? __pfx_do_mkdirat+0x10/0x10 [ 1376.625899] __x64_sys_mkdir+0xf3/0x140 [ 1376.625916] do_syscall_64+0xbf/0x390 [ 1376.625931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.625944] RIP: 0033:0x7f6c3639bc27 [ 1376.625953] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.625965] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1376.625977] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1376.625985] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1376.625992] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1376.625999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1376.626007] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1376.626022] [ 1376.649582] random: crng reseeded on system resumption [ 1376.702003] random: crng reseeded on system resumption 13:27:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 9) 13:27:51 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1376.750698] No source specified [ 1376.758382] random: crng reseeded on system resumption 13:27:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 10) 13:27:51 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:27:51 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:27:52 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "e37140", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040104f8700101"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 13:27:52 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000100), &(0x7f00000000c0), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x2203020, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@subj_user={'subj_user', 0x3d, '#:#,-'}}, {@smackfsroot={'smackfsroot', 0x3d, '@'}}, {@appraise}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 13:27:52 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1376.863507] audit: type=1400 audit(1760016472.074:10): avc: denied { write } for pid=23151 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 1376.864571] FAULT_INJECTION: forcing a failure. [ 1376.864571] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.867175] CPU: 0 UID: 0 PID: 23138 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1376.867209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.867224] Call Trace: [ 1376.867237] [ 1376.867246] dump_stack_lvl+0xfa/0x120 [ 1376.867282] should_fail_ex+0x4d7/0x5e0 [ 1376.867317] ? jbd2__journal_start+0x193/0x6b0 [ 1376.867346] should_failslab+0xc2/0x120 [ 1376.867383] kmem_cache_alloc_noprof+0x72/0x680 [ 1376.867411] ? lock_is_held_type+0x9e/0x120 [ 1376.867438] ? lock_is_held_type+0x9e/0x120 [ 1376.867468] ? jbd2__journal_start+0x193/0x6b0 [ 1376.867496] jbd2__journal_start+0x193/0x6b0 [ 1376.867529] __ext4_journal_start_sb+0x325/0x5d0 [ 1376.867574] __ext4_new_inode+0x2cbe/0x4d70 [ 1376.867627] ? __pfx___ext4_new_inode+0x10/0x10 [ 1376.867674] ? __pfx_avc_has_perm+0x10/0x10 [ 1376.867712] ? __pfx___dquot_initialize+0x10/0x10 [ 1376.867751] ext4_mkdir+0x331/0xb30 [ 1376.867787] ? __pfx_ext4_mkdir+0x10/0x10 [ 1376.867813] ? security_inode_permission+0x72/0xe0 [ 1376.867854] vfs_mkdir+0x59a/0x8d0 [ 1376.867887] do_mkdirat+0x19f/0x3d0 [ 1376.867923] ? __pfx_do_mkdirat+0x10/0x10 [ 1376.867967] __x64_sys_mkdir+0xf3/0x140 [ 1376.868002] do_syscall_64+0xbf/0x390 [ 1376.868034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.868060] RIP: 0033:0x7f6c3639bc27 [ 1376.868079] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.868103] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1376.868128] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1376.868145] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1376.868161] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1376.868176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1376.868192] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1376.868225] [ 1376.896923] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory [ 1376.903539] random: crng reseeded on system resumption 13:28:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:28:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:28:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 11) 13:28:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/119, 0x77}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/196, 0xc4}], 0x4, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/48, 0x30}, {&(0x7f00000016c0)=""/171, 0xab}], 0x5, &(0x7f0000000380)}}], 0x2, 0x0, 0x0) 13:28:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000c80), 0x0, 0x48000) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x52, r2}) r3 = socket$inet6(0xa, 0x80000, 0x5) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @initdev}, &(0x7f0000000180)=0xc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04188a04c1f9f814c6b80158324857da544339297e7578b24fff3e8c240792542c956496cf4c72b827e54318a0298bcb45881f0875de0dca24c0b777c29cf31bafc596b0f9c858fc952b8b65f3df71ab11623f49ddd7000000"], 0x1a) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x1, 0xc9}}}, 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 13:28:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1391.146182] No source specified [ 1391.150155] random: crng reseeded on system resumption 13:28:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 12) 13:28:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1391.372192] random: crng reseeded on system resumption [ 1391.388475] FAULT_INJECTION: forcing a failure. [ 1391.388475] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.390835] CPU: 0 UID: 0 PID: 23689 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1391.390872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1391.390887] Call Trace: [ 1391.390896] [ 1391.390906] dump_stack_lvl+0xfa/0x120 [ 1391.390944] should_fail_ex+0x4d7/0x5e0 [ 1391.390983] should_failslab+0xc2/0x120 [ 1391.391022] __kmalloc_noprof+0xc8/0x760 [ 1391.391048] ? current_umask+0x12/0x80 [ 1391.391086] ? posix_acl_create.part.0+0x2a0/0x480 [ 1391.391119] ? security_inode_init_security+0x13d/0x390 [ 1391.391154] ? security_inode_init_security+0x13d/0x390 [ 1391.391181] security_inode_init_security+0x13d/0x390 [ 1391.391210] ? __pfx_ext4_initxattrs+0x10/0x10 [ 1391.391240] ? __pfx_security_inode_init_security+0x10/0x10 [ 1391.391275] ? crc32c+0x1ae/0x350 [ 1391.391306] __ext4_new_inode+0x3452/0x4d70 [ 1391.391362] ? __pfx___ext4_new_inode+0x10/0x10 [ 1391.391407] ? __pfx___dquot_initialize+0x10/0x10 [ 1391.391448] ext4_mkdir+0x331/0xb30 [ 1391.391487] ? __pfx_ext4_mkdir+0x10/0x10 [ 1391.391514] ? security_inode_permission+0x72/0xe0 [ 1391.391557] vfs_mkdir+0x59a/0x8d0 [ 1391.391592] do_mkdirat+0x19f/0x3d0 [ 1391.391630] ? __pfx_do_mkdirat+0x10/0x10 [ 1391.391684] __x64_sys_mkdir+0xf3/0x140 [ 1391.391721] do_syscall_64+0xbf/0x390 [ 1391.391755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.391782] RIP: 0033:0x7f6c3639bc27 [ 1391.391802] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1391.391828] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1391.391854] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1391.391872] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1391.391888] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1391.391905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1391.391922] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1391.391957] 13:28:06 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe9}, "9cfeea4516c1922c959dd5433d92c611867d861aeebfca47b45437b952d138a83d3ed94258e09af7403b982da688fc5e6672f4e757441a906b1b02c14d5f3cf28aefeaa4a720c770e90870e28bd48dbcec8abc8e397fc38d46e8c1d3d49004cc3b571e4f9d6dfd5e96b64a2767e9682251096164337234c1c00bef8c1e936feeac6a22a62784a0ba429d3bc703eacc9aa04096d52dac2a1c023d829f588c57adcee2037188d31b598d7df98a9194ea96e054906ad11d03723cf3ba5abb5e6bbd3c4e6fd95e4d3a3eff47169d48e503b53554e0c53a57ecd4c2334b8d144dd22e531d977a3ba623afb6"}, 0xed) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8f020001c000500188000000000010000100400000020000600"], 0x25) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:28:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x4, 0x4b, 0xea, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xc2b0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x28, 0x400}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f0000000880)=""/164, 0xa4}], 0x9, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000b80)=""/30, 0x1e}, {&(0x7f0000000bc0)=""/12, 0xc}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000d00)=""/149, 0x95}], 0x4, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ec0)=""/142, 0x8e}], 0x1, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/227, 0xe3}], 0x1, &(0x7f00000011c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001340)=""/177, 0xb1}, {&(0x7f0000001400)=""/97, 0x61}], 0x3, &(0x7f00000014c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/63, 0x3f}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/204, 0xcc}, {&(0x7f0000002780)=""/125, 0x7d}, {&(0x7f0000002800)=""/71, 0x47}, {&(0x7f0000002880)=""/109, 0x6d}], 0x7, &(0x7f0000002980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x6, 0x0, &(0x7f0000002b40)={0x77359400}) setgid(r0) 13:28:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1391.697956] random: crng reseeded on system resumption 13:28:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x72, 0x0, 0x5, 0x1004, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x8, 0x0, 0x0, 0x4, 0x9, 0x9, 0x0, 0x6, 0x0, 0x100}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:28:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:18 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043b0a00000000000000040000dd002008c6fd3c37f060235de635cc45dc35ea484b179432516fe8c826537cde0bfa36b7d7e20993e1dacb74a188e60f837dadd9ef079fc6573e66d3e811770ff98b"], 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:28:18 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 13) 13:28:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {0x0}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1402.921941] random: crng reseeded on system resumption [ 1402.938608] No source specified [ 1402.974479] random: crng reseeded on system resumption 13:28:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 14) 13:28:18 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1403.151887] FAULT_INJECTION: forcing a failure. [ 1403.151887] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.153869] CPU: 0 UID: 0 PID: 24225 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1403.153899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.153913] Call Trace: [ 1403.153921] [ 1403.153929] dump_stack_lvl+0xfa/0x120 [ 1403.153962] should_fail_ex+0x4d7/0x5e0 [ 1403.153996] should_failslab+0xc2/0x120 [ 1403.154029] __kmalloc_node_track_caller_noprof+0xc1/0x760 [ 1403.154059] ? lock_acquire+0x15e/0x2f0 [ 1403.154085] ? sidtab_sid2str_get+0x85/0x6f0 [ 1403.154112] ? sidtab_sid2str_get+0x17e/0x6f0 [ 1403.154145] ? kmemdup_noprof+0x2b/0x60 [ 1403.154169] kmemdup_noprof+0x2b/0x60 [ 1403.154192] sidtab_sid2str_get+0x17e/0x6f0 [ 1403.154224] sidtab_entry_to_string+0x33/0x110 [ 1403.154252] security_sid_to_context_core+0x350/0x620 [ 1403.154282] selinux_inode_init_security+0x433/0x650 [ 1403.154313] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 1403.154340] ? trace_kmalloc+0x1f/0xb0 [ 1403.154372] ? current_umask+0x12/0x80 [ 1403.154405] ? security_inode_init_security+0x13d/0x390 [ 1403.154439] security_inode_init_security+0x1e6/0x390 [ 1403.154465] ? __pfx_ext4_initxattrs+0x10/0x10 [ 1403.154490] ? __pfx_security_inode_init_security+0x10/0x10 [ 1403.154518] ? crc32c+0x1ae/0x350 [ 1403.154544] __ext4_new_inode+0x3452/0x4d70 [ 1403.154592] ? __pfx___ext4_new_inode+0x10/0x10 [ 1403.154629] ? __pfx___dquot_initialize+0x10/0x10 [ 1403.154673] ext4_mkdir+0x331/0xb30 [ 1403.154707] ? __pfx_ext4_mkdir+0x10/0x10 [ 1403.154729] ? security_inode_permission+0x72/0xe0 [ 1403.154765] vfs_mkdir+0x59a/0x8d0 [ 1403.154794] do_mkdirat+0x19f/0x3d0 [ 1403.154826] ? __pfx_do_mkdirat+0x10/0x10 [ 1403.154865] __x64_sys_mkdir+0xf3/0x140 [ 1403.154895] do_syscall_64+0xbf/0x390 [ 1403.154924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.154947] RIP: 0033:0x7f6c3639bc27 [ 1403.154963] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.154985] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1403.155007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1403.155021] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 13:28:18 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x5) [ 1403.155035] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1403.155049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1403.155063] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1403.155093] [ 1403.174548] random: crng reseeded on system resumption 13:28:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:18 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 15) 13:28:18 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1403.359230] random: crng reseeded on system resumption [ 1403.396500] No source specified 13:28:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {0x0}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:28:28 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:28 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043b0a440958e3000000040000"], 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:28:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {0x0}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:28:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 16) 13:28:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x4, 0x8b, 0x4, 0x1}, {0x1, 0xff, 0x6, 0x2}]}) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r1 = getuid() r2 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1, 0xa, &(0x7f0000000a80)=[{&(0x7f0000000240)="2b48c64eafcd493b159a76f4e9b8db5ba4acb904284073bece72968cb35040434a912f9a30a5bde924ba52b55423fec9c75b135852cbf9665321a459ee00192685bbb53bdd678bb1ec86477599341a1eecac91", 0x53, 0x8}, {&(0x7f0000000380)="3740115855171bf732be75ba5c389d3209e0f9f7083f14881cf964410f317ea1bd731db1388086357b6eb041e35dbad1d3", 0x31, 0x4}, {&(0x7f0000000680)="f730f641b0757d80960190057c58d38e3d67776059c5763f526ec5296a2a4ff04db8a39963efbdca3e8d6c1a1d37eb9bcfb8236319bab75507b0c4e14d00831975829ff35f6a847b922829166002369d7e1b3f81f7c5a85fdda4ebc58acd4b4533b90bb83968ac0a11289734e2a6183947274a5358607ef86fd5a99833f6d2318eed2a82af2b07f3fbe1cfa28b3128401e16867bbae453b9aee7d5dd4a8ac428d24148ba8628c17133", 0xa9, 0x1}, {&(0x7f0000000740)="8da8617d95cea825b662e5ddad8e6e1fca6842fc2b2f91c99b2a26a8ec19a7af75073c4d8fb7d58f71acb596793a76998925741eda259dd4d334babb9c2187a2", 0x40, 0x81}, {&(0x7f0000000780)="d044e930601bf6743919ab4d34dac1871bf1855248eab786d15e85c0a9bc8f834dbdd16bcbc0069e2d37abb5d144e9878ce55bb3e883ec53491545c32822117b5c9173b1", 0x44, 0x7}, {&(0x7f0000000800)="23e97d7353d058fac7e031a2dd98799497af821ac47c20e6a1614a0aeae90754d7d9f51062b99745248922a9b00c99f2bc1b85d0dfbf3ccb946e9af1d9ba7769735a83a25ff3e44af8389458619cb8a24dade1", 0x53, 0x6}, {&(0x7f0000000880)="4884ef00fd05dc0e550d20a0746e73edc0e1edab9b4a3ac5c4c8b131481ebeb795e6bc72fa364d02d5869ce46e3731d8d7346e7a358c3740c908be85e2010490c561b49e48af0c5d2a6b1c24fcf5dac3cba534b9ca3108ffe0ef892758b885637d9bfa4df6ff33b496d1bf32d05e0fb51cd03151a0a45d3aba2136214f0ba33ff57b1d7c4d14b370dbf3d095a612e987c2f3c513e893e352034ec98183ed9ac7709fe6b78b247642cadf85990ecaf437079747dde4f8b0debb50df91f64c1c9d8a28d2d4d92a0a1430181c54829d3e75ef8871624a61194e18477e28e3", 0xdd, 0x1}, {&(0x7f0000000980)="a6fce179e6c35d4bd959037f0a69a9fd1e91232bb08b5224d5324a7c5109db018f180dd128748be5671e50397bc79f2e82f5cb856e32b10c65fe3cbf32f49bf863d5b3e7d0d6f149652ac5d6f0dd0e07c55397", 0x53, 0x7c}, {&(0x7f0000000a00)='\te!', 0x3, 0xffffffffffffb897}, {&(0x7f0000000a40)="2cd1e3783a1902936017d853f10247809eec9de77c74515ac9701359cc81c8eb46a30a435ccb8ccedbda4c34a5107eed7ed5", 0x32, 0x81}], 0x2020007, &(0x7f0000000b80)={[{@shortname_winnt}], [{@subj_user={'subj_user', 0x3d, 'euid>'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'obj_role'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'obj_type'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@uid_lt={'uid<', r1}}, {@fowner_gt={'fowner>', r1}}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r4}}]}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x1084000, &(0x7f0000000c40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_loose}, {@version_L}], [{@smackfshat={'smackfshat', 0x3d, '\xe0'}}, {@uid_gt={'uid>', r1}}]}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xc0800, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@access_uid={'access', 0x3d, r1}}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@debug={'debug', 0x3d, 0x1ff}}], [{@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_lt={'uid<', 0xee01}}, {@obj_type={'obj_type', 0x3d, 'E&\xdb\xd2\xe1\xe1'}}, {@appraise}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fsmagic={'fsmagic', 0x3d, 0x7d3}}, {@subj_type={'subj_type', 0x3d, '%&#\'*{^^'}}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, 'q\x95\xea;PI*\xfaI\x80\xdd@\x11\xae\x8a\xe1j\xd7Lx\x17\x8c\x05L4\xf6y1\x95\t+\xca\xd5A\x01\x04\x00\x00\xef\xactG\x99\x0f\xb3\x06\x1e\xc4\xa4\xe0\xdc\x15\xe3\xb1\x0e\xb8\xff\x81\xc2\xc9u\xd6W\x13\x01\xa7\xdf?tt\x84 \xe4^}\x92\xf2\xb5\xa8 \xc9e6\xa0*\xda\xc2\xa4\x19H\x8dr\x0f\rh\x1ff\xfc\xe7\xa2\x12\xd1\xcb~(\x9aq>\xbd\xaa\xfb\vP|\a\xb6G\x85G,T\xc7\xe1\xdd\xda-\x8f\x7f\xf9F\x12\x02\xb7\xa5AeNg3\x10\xef\xd04Tw\x7frH:w\x82\x89}Y\x9cc\xfc]\xa1)\xdf\xe6\x04\xe1\x1c#\xd4\xad\x134_\x8c\xc42S\xb1\x1e\x03\a\x97\xb3\xe4\xed\x91\xd3[/\xc0\xd0\xc2\xbb\xfe\xc8\xa76\xe5\x931'}}]}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) signalfd(r0, &(0x7f0000000080)={[0x81]}, 0x8) [ 1413.735096] FAULT_INJECTION: forcing a failure. [ 1413.735096] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.736482] CPU: 0 UID: 0 PID: 24424 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1413.736506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1413.736517] Call Trace: [ 1413.736523] [ 1413.736530] dump_stack_lvl+0xfa/0x120 [ 1413.736557] should_fail_ex+0x4d7/0x5e0 [ 1413.736584] should_failslab+0xc2/0x120 [ 1413.736611] __kmalloc_noprof+0xc8/0x760 [ 1413.736628] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 1413.736657] ? ext4_find_extent+0x7f5/0xa00 [ 1413.736681] ? ext4_find_extent+0x7f5/0xa00 [ 1413.736696] ext4_find_extent+0x7f5/0xa00 [ 1413.736719] ext4_ext_map_blocks+0x1cc/0x5f70 [ 1413.736743] ? lock_acquire+0x15e/0x2f0 [ 1413.736766] ? fs_reclaim_acquire+0xae/0x150 [ 1413.736791] ? lock_is_held_type+0x9e/0x120 [ 1413.736818] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1413.736835] ? bdev_getblk+0x84/0xf0 [ 1413.736861] ? map_id_range_up+0x1d5/0x350 [ 1413.736887] ? look_up_lock_class+0x56/0x150 [ 1413.736907] ? register_lock_class+0x41/0x560 [ 1413.736931] ? __lock_acquire+0xc65/0x1b70 [ 1413.736961] ? lock_acquire+0x15e/0x2f0 [ 1413.736981] ? ext4_map_blocks+0x49f/0x14a0 [ 1413.737009] ext4_map_query_blocks+0x117/0x890 [ 1413.737032] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1413.737053] ? __pfx_down_read+0x10/0x10 [ 1413.737074] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1413.737103] ext4_map_blocks+0x4b3/0x14a0 [ 1413.737127] ? mark_held_locks+0x49/0x80 [ 1413.737149] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1413.737181] ? __brelse+0x7f/0xa0 [ 1413.737200] ? __ext4_new_inode+0x116/0x4d70 [ 1413.737230] ext4_append+0x1b6/0x530 [ 1413.737259] ? __pfx_ext4_append+0x10/0x10 [ 1413.737288] ? __pfx___ext4_new_inode+0x10/0x10 [ 1413.737320] ext4_init_new_dir+0x13c/0x240 [ 1413.737339] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1413.737366] ext4_mkdir+0x3c5/0xb30 [ 1413.737388] ? __pfx_ext4_mkdir+0x10/0x10 [ 1413.737406] ? security_inode_permission+0x72/0xe0 [ 1413.737449] vfs_mkdir+0x59a/0x8d0 [ 1413.737476] do_mkdirat+0x19f/0x3d0 [ 1413.737502] ? __pfx_do_mkdirat+0x10/0x10 [ 1413.737534] __x64_sys_mkdir+0xf3/0x140 [ 1413.737559] do_syscall_64+0xbf/0x390 [ 1413.737582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.737601] RIP: 0033:0x7f6c3639bc27 [ 1413.737614] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1413.737632] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1413.737649] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1413.737661] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1413.737672] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1413.737683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1413.737695] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1413.737719] [ 1413.743937] tmpfs: Invalid gid '0x00000000ffffffff' [ 1413.749356] random: crng reseeded on system resumption 13:28:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:29 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 17) 13:28:29 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0401040000000166a677c14098bf34bf9f19386761dd4368f6889eca2557db3bffd61eef65427f811b01e5ba5531c50b4b31f3c928da4b1219d4cd0f8c51170332c8495befb2b3374bf85422833934d6e3e234e57d98d65ad17df3524373ccc774b987c0e9052bbe251e873e7b87bffeff9c2a1cafebf780f9c2d3988cb00b418aad86726a7f9bc7fe5825ecffac24dc3709932900d1f24e4041063b8dc0f519690195369061333157420d01af6b6c1815b4b700e6907755c7cfa020a2dc8f6192105130cb38b103a1627a5cd07fe837e0e127abcdf9c5900b70b558bad8221a8dedc5419e99848ac926a41a88648fa33003978f07ea"], 0x7) [ 1413.929084] No source specified 13:28:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 18) [ 1414.008613] random: crng reseeded on system resumption [ 1414.100009] FAULT_INJECTION: forcing a failure. [ 1414.100009] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.101866] CPU: 0 UID: 0 PID: 24838 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1414.101892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1414.101903] Call Trace: [ 1414.101910] [ 1414.101918] dump_stack_lvl+0xfa/0x120 [ 1414.101947] should_fail_ex+0x4d7/0x5e0 [ 1414.101975] ? __es_insert_extent+0xed2/0x1370 [ 1414.101996] should_failslab+0xc2/0x120 [ 1414.102024] kmem_cache_alloc_noprof+0x72/0x680 [ 1414.102053] ? __es_insert_extent+0xed2/0x1370 [ 1414.102076] __es_insert_extent+0xed2/0x1370 [ 1414.102101] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1414.102138] ext4_es_insert_extent+0x4d0/0x1100 [ 1414.102170] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1414.102198] ? lock_acquire+0x15e/0x2f0 [ 1414.102221] ? find_held_lock+0x2b/0x80 [ 1414.102250] ? ext4_es_find_extent_range+0x1cf/0x510 [ 1414.102273] ? lock_release+0xc8/0x290 [ 1414.102296] ? do_raw_read_unlock+0x44/0xe0 [ 1414.102328] ext4_ext_map_blocks+0x178d/0x5f70 [ 1414.102354] ? lock_acquire+0x15e/0x2f0 [ 1414.102375] ? fs_reclaim_acquire+0xae/0x150 [ 1414.102402] ? lock_is_held_type+0x9e/0x120 [ 1414.102431] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1414.102454] ? __lock_acquire+0xc65/0x1b70 [ 1414.102485] ? __lock_acquire+0xc65/0x1b70 [ 1414.102517] ? lock_acquire+0x15e/0x2f0 [ 1414.102538] ? ext4_map_blocks+0x49f/0x14a0 [ 1414.102567] ext4_map_query_blocks+0x117/0x890 [ 1414.102591] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1414.102613] ? __pfx_down_read+0x10/0x10 [ 1414.102636] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1414.102671] ext4_map_blocks+0x4b3/0x14a0 [ 1414.102701] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1414.102725] ? __pfx_ext4_initxattrs+0x10/0x10 [ 1414.102747] ? __pfx_security_inode_init_security+0x10/0x10 [ 1414.102771] ? crc32c+0x1ae/0x350 [ 1414.102791] ? __brelse+0x7f/0xa0 [ 1414.102812] ? __ext4_new_inode+0x116/0x4d70 [ 1414.102843] ext4_append+0x1b6/0x530 [ 1414.102874] ? __pfx_ext4_append+0x10/0x10 [ 1414.102903] ? __pfx___ext4_new_inode+0x10/0x10 [ 1414.102938] ext4_init_new_dir+0x13c/0x240 [ 1414.102957] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1414.102985] ext4_mkdir+0x3c5/0xb30 [ 1414.103009] ? __pfx_ext4_mkdir+0x10/0x10 [ 1414.103028] ? security_inode_permission+0x72/0xe0 [ 1414.103059] vfs_mkdir+0x59a/0x8d0 [ 1414.103084] do_mkdirat+0x19f/0x3d0 [ 1414.103111] ? __pfx_do_mkdirat+0x10/0x10 [ 1414.103144] __x64_sys_mkdir+0xf3/0x140 [ 1414.103171] do_syscall_64+0xbf/0x390 [ 1414.103197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.103216] RIP: 0033:0x7f6c3639bc27 [ 1414.103231] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1414.103249] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1414.103267] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1414.103280] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1414.103291] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1414.103303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1414.103314] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1414.103341] [ 1414.167757] No source specified 13:28:39 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 19) 13:28:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {0x0}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:28:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0xb1, 0x0, 0x4402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:28:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:39 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x54}}}, 0x4) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:28:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1424.490977] random: crng reseeded on system resumption 13:28:39 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1424.526332] No source specified 13:28:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 20) 13:28:39 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6595, &(0x7f0000000080)={0x0, 0xb905, 0x8, 0x0, 0x148}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) [ 1424.682357] FAULT_INJECTION: forcing a failure. [ 1424.682357] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.683823] CPU: 1 UID: 0 PID: 25037 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1424.683841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.683849] Call Trace: [ 1424.683853] [ 1424.683858] dump_stack_lvl+0xfa/0x120 [ 1424.683878] should_fail_ex+0x4d7/0x5e0 [ 1424.683897] should_failslab+0xc2/0x120 [ 1424.683916] __kmalloc_noprof+0xc8/0x760 [ 1424.683927] ? mark_held_locks+0x49/0x80 [ 1424.683943] ? ext4_find_extent+0x7f5/0xa00 [ 1424.683959] ? ext4_find_extent+0x7f5/0xa00 [ 1424.683970] ext4_find_extent+0x7f5/0xa00 [ 1424.683985] ext4_ext_map_blocks+0x1cc/0x5f70 [ 1424.684003] ? lock_acquire+0x15e/0x2f0 [ 1424.684017] ? fs_reclaim_acquire+0xae/0x150 [ 1424.684034] ? lock_is_held_type+0x9e/0x120 [ 1424.684051] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1424.684071] ? lock_acquire+0x15e/0x2f0 [ 1424.684084] ? ext4_map_blocks+0x55b/0x14a0 [ 1424.684106] ? down_write+0x119/0x1f0 [ 1424.684120] ? __pfx_down_write+0x10/0x10 [ 1424.684133] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1424.684153] ext4_map_blocks+0x624/0x14a0 [ 1424.684170] ? __up_read+0x197/0x750 [ 1424.684187] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1424.684202] ? __pfx___up_read+0x10/0x10 [ 1424.684218] ? lock_release+0xc8/0x290 [ 1424.684235] ? ext4_map_blocks+0x1e0/0x14a0 [ 1424.684253] ext4_getblk+0x682/0x8e0 [ 1424.684270] ? __pfx_ext4_getblk+0x10/0x10 [ 1424.684284] ? __pfx_security_inode_init_security+0x10/0x10 [ 1424.684300] ? crc32c+0x1ae/0x350 [ 1424.684316] ext4_bread+0x2e/0x1a0 [ 1424.684332] ext4_append+0x224/0x530 [ 1424.684352] ? __pfx_ext4_append+0x10/0x10 [ 1424.684371] ? __pfx___ext4_new_inode+0x10/0x10 [ 1424.684393] ext4_init_new_dir+0x13c/0x240 [ 1424.684406] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1424.684424] ext4_mkdir+0x3c5/0xb30 [ 1424.684439] ? __pfx_ext4_mkdir+0x10/0x10 [ 1424.684451] ? security_inode_permission+0x72/0xe0 [ 1424.684471] vfs_mkdir+0x59a/0x8d0 [ 1424.684488] do_mkdirat+0x19f/0x3d0 [ 1424.684505] ? __pfx_do_mkdirat+0x10/0x10 [ 1424.684526] __x64_sys_mkdir+0xf3/0x140 [ 1424.684542] do_syscall_64+0xbf/0x390 [ 1424.684559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.684571] RIP: 0033:0x7f6c3639bc27 [ 1424.684581] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.684592] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1424.684605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1424.684613] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1424.684620] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1424.684627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1424.684635] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1424.684656] 13:28:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {0x0}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:28:49 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:49 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 21) 13:28:49 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40810, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xeba}}, 0x0, 0x0, r0, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:28:49 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3c}, "c945441b6ab26cf964b3314a2d9dee6289fb170da53cb28bd6a2d874860bdbfd215eda57837350e0927b34e3fdc1bae516a34cd530fbe7ee4880f5f4"}, 0x40) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:28:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1434.793705] No source specified 13:28:50 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c"}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:28:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:28:50 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:28:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 22) 13:28:50 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8002628}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x44050) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x8, 0xc8, 0x7, 0x1, "abd0c9efce6dbd24"}}}, 0x10) 13:28:50 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x1f, 0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x10800, 0x6e7, 0x2, 0x2, 0x6, 0x3f, 0x1, 0x0, 0x2, 0x0, 0x7c5}, 0x0, 0x8, r0, 0x0) 13:28:50 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c"}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1435.074244] FAULT_INJECTION: forcing a failure. [ 1435.074244] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.076042] CPU: 1 UID: 0 PID: 25515 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1435.076073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1435.076087] Call Trace: [ 1435.076095] [ 1435.076104] dump_stack_lvl+0xfa/0x120 [ 1435.076137] should_fail_ex+0x4d7/0x5e0 [ 1435.076169] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 1435.076200] should_failslab+0xc2/0x120 [ 1435.076233] kmem_cache_alloc_noprof+0x72/0x680 [ 1435.076257] ? do_raw_spin_unlock+0x53/0x220 [ 1435.076296] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 1435.076325] ext4_mb_new_blocks+0x64e/0x45b0 [ 1435.076364] ? kasan_save_track+0x14/0x30 [ 1435.076395] ? __kasan_kmalloc+0x7f/0x90 [ 1435.076427] ? trace_kmalloc+0x1f/0xb0 [ 1435.076457] ? __kmalloc_noprof+0x2c9/0x760 [ 1435.076477] ? mark_held_locks+0x49/0x80 [ 1435.076503] ? ext4_find_extent+0x7f5/0xa00 [ 1435.076524] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1435.076556] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1435.076576] ? ext4_inode_to_goal_block+0x323/0x430 [ 1435.076614] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 1435.076657] ? lock_acquire+0x15e/0x2f0 [ 1435.076682] ? fs_reclaim_acquire+0xae/0x150 [ 1435.076712] ? lock_is_held_type+0x9e/0x120 [ 1435.076742] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1435.076778] ? lock_acquire+0x15e/0x2f0 [ 1435.076802] ? ext4_map_blocks+0x55b/0x14a0 [ 1435.076843] ? __pfx_down_write+0x10/0x10 [ 1435.076869] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1435.076904] ext4_map_blocks+0x624/0x14a0 [ 1435.076937] ? __up_read+0x197/0x750 [ 1435.076966] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1435.076993] ? __pfx___up_read+0x10/0x10 [ 1435.077023] ? lock_release+0xc8/0x290 [ 1435.077054] ? ext4_map_blocks+0x1e0/0x14a0 [ 1435.077089] ext4_getblk+0x682/0x8e0 [ 1435.077119] ? __pfx_ext4_getblk+0x10/0x10 [ 1435.077146] ? __pfx_security_inode_init_security+0x10/0x10 [ 1435.077175] ? crc32c+0x1ae/0x350 [ 1435.077202] ext4_bread+0x2e/0x1a0 [ 1435.077232] ext4_append+0x224/0x530 [ 1435.077267] ? __pfx_ext4_append+0x10/0x10 [ 1435.077302] ? __pfx___ext4_new_inode+0x10/0x10 [ 1435.077343] ext4_init_new_dir+0x13c/0x240 [ 1435.077365] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1435.077398] ext4_mkdir+0x3c5/0xb30 [ 1435.077427] ? __pfx_ext4_mkdir+0x10/0x10 [ 1435.077449] ? security_inode_permission+0x72/0xe0 [ 1435.077485] vfs_mkdir+0x59a/0x8d0 [ 1435.077514] do_mkdirat+0x19f/0x3d0 [ 1435.077546] ? __pfx_do_mkdirat+0x10/0x10 [ 1435.077585] __x64_sys_mkdir+0xf3/0x140 [ 1435.077616] do_syscall_64+0xbf/0x390 [ 1435.077644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.077667] RIP: 0033:0x7f6c3639bc27 [ 1435.077701] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1435.077723] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1435.077744] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1435.077759] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1435.077773] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1435.077786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1435.077800] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1435.077831] 13:28:50 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1435.839850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1435.841463] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1435.849304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1435.852340] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1435.853486] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1437.095735] Bluetooth: hci0: command 0x0406 tx timeout [ 1437.863809] Bluetooth: hci5: command 0x0406 tx timeout [ 1437.863860] Bluetooth: hci3: command 0x0406 tx timeout [ 1439.143735] Bluetooth: hci0: command 0x0406 tx timeout [ 1439.911963] Bluetooth: hci5: command 0x0406 tx timeout 13:29:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:00 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2271b2bc9fa59b7c946030f15eee2e48791f7772995b28a3e0be97aa49207fc62aac0352d1301dec80fb5ef15e4cf3d818c9e5d471c807215ec749ef602883c7f0884a11f9d74539dc8bd7"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) 13:29:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:00 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c"}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 23) 13:29:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1445.470479] No source specified 13:29:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 24) [ 1445.577082] FAULT_INJECTION: forcing a failure. [ 1445.577082] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.578046] CPU: 1 UID: 0 PID: 25794 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1445.578064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.578072] Call Trace: [ 1445.578078] [ 1445.578083] dump_stack_lvl+0xfa/0x120 [ 1445.578111] should_fail_ex+0x4d7/0x5e0 [ 1445.578130] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 1445.578149] should_failslab+0xc2/0x120 [ 1445.578169] kmem_cache_alloc_noprof+0x72/0x680 [ 1445.578188] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 1445.578205] ext4_mb_new_blocks+0x2414/0x45b0 [ 1445.578228] ? kasan_save_track+0x14/0x30 [ 1445.578247] ? __kasan_kmalloc+0x7f/0x90 [ 1445.578266] ? trace_kmalloc+0x1f/0xb0 [ 1445.578284] ? __kmalloc_noprof+0x2c9/0x760 [ 1445.578296] ? mark_held_locks+0x49/0x80 [ 1445.578312] ? ext4_find_extent+0x7f5/0xa00 [ 1445.578325] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1445.578344] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1445.578355] ? ext4_inode_to_goal_block+0x323/0x430 [ 1445.578377] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 1445.578397] ? lock_acquire+0x15e/0x2f0 [ 1445.578411] ? fs_reclaim_acquire+0xae/0x150 [ 1445.578431] ? lock_is_held_type+0x9e/0x120 [ 1445.578452] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1445.578473] ? lock_acquire+0x15e/0x2f0 [ 1445.578487] ? ext4_map_blocks+0x55b/0x14a0 [ 1445.578511] ? __pfx_down_write+0x10/0x10 [ 1445.578526] ? ext4_es_lookup_extent+0xc8/0xb30 [ 1445.578547] ext4_map_blocks+0x624/0x14a0 [ 1445.578566] ? __up_read+0x197/0x750 [ 1445.578584] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1445.578600] ? __pfx___up_read+0x10/0x10 [ 1445.578618] ? lock_release+0xc8/0x290 [ 1445.578636] ? ext4_map_blocks+0x1e0/0x14a0 [ 1445.578656] ext4_getblk+0x682/0x8e0 [ 1445.578674] ? __pfx_ext4_getblk+0x10/0x10 [ 1445.578689] ? __pfx_security_inode_init_security+0x10/0x10 [ 1445.578706] ? crc32c+0x1ae/0x350 [ 1445.578723] ext4_bread+0x2e/0x1a0 [ 1445.578740] ext4_append+0x224/0x530 [ 1445.578761] ? __pfx_ext4_append+0x10/0x10 [ 1445.578781] ? __pfx___ext4_new_inode+0x10/0x10 [ 1445.578805] ext4_init_new_dir+0x13c/0x240 [ 1445.578818] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1445.578837] ext4_mkdir+0x3c5/0xb30 [ 1445.578853] ? __pfx_ext4_mkdir+0x10/0x10 [ 1445.578866] ? security_inode_permission+0x72/0xe0 [ 1445.578887] vfs_mkdir+0x59a/0x8d0 [ 1445.578905] do_mkdirat+0x19f/0x3d0 [ 1445.578924] ? __pfx_do_mkdirat+0x10/0x10 [ 1445.578946] __x64_sys_mkdir+0xf3/0x140 [ 1445.578964] do_syscall_64+0xbf/0x390 [ 1445.578981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.578995] RIP: 0033:0x7f6c3639bc27 [ 1445.579005] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.579018] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1445.579030] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1445.579039] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1445.579047] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1445.579055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1445.579063] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1445.579080] 13:29:00 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:00 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2827, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x4, 0x80, 0x0, 0xb7, 0x2, 0x0, 0x0, 0x2, 0x10, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x10200, 0xfff, 0x5, 0x0, 0x6, 0x40, 0x6, 0x0, 0x2, 0x0, 0x1}) getresgid(&(0x7f00000003c0), &(0x7f00000000c0), 0x0) 13:29:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x0, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 25) 13:29:00 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "8dde9430c2209c58"}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}, {0x9e4, 0x6}}}}, 0x11) [ 1445.800869] No source specified 13:29:01 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 26) 13:29:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) [ 1445.951135] No source specified [ 1446.352810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1446.353532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1446.354343] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1447.591807] Bluetooth: hci0: command 0x0406 tx timeout [ 1448.359771] Bluetooth: hci5: command 0x0406 tx timeout [ 1448.360705] Bluetooth: hci3: command 0x0406 tx timeout 13:29:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:10 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 27) 13:29:10 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x89}, "a1955bf94ee771d8c67d9e47d06c49d4432afd0fefcc0ca5a78b8b609abfba6af81e18756d4c042292b099a838da012da67fc83fc04c665da8f7a1cb25182bfc5ebb1ac56ad1cefc3c84df58199c85cd3bf9752380ac57f7dca54b2f65e475939bed3889e9ec24ea7b1c4d4228c20a8e84741f80af39fce895d974e070bb5bd73a14da6341f0992940"}, 0x8d) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x6, 0xbe9}}}}, 0x11) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:29:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r1}}]}) setfsgid(r1) 13:29:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1455.096106] No source specified 13:29:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 28) [ 1455.128198] tmpfs: Invalid gid '0x00000000ffffffff' [ 1455.163980] FAULT_INJECTION: forcing a failure. [ 1455.163980] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.165014] CPU: 0 UID: 0 PID: 26487 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1455.165032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.165040] Call Trace: [ 1455.165044] [ 1455.165049] dump_stack_lvl+0xfa/0x120 [ 1455.165070] should_fail_ex+0x4d7/0x5e0 [ 1455.165089] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 1455.165103] should_failslab+0xc2/0x120 [ 1455.165123] kmem_cache_alloc_noprof+0x72/0x680 [ 1455.165142] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 1455.165155] jbd2_journal_add_journal_head+0x367/0x5d0 [ 1455.165170] jbd2_journal_get_create_access+0x44/0x560 [ 1455.165187] ? lock_is_held_type+0x9e/0x120 [ 1455.165203] __ext4_journal_get_create_access+0x54/0x1b0 [ 1455.165227] ext4_getblk+0x3c9/0x8e0 [ 1455.165246] ? __pfx_ext4_getblk+0x10/0x10 [ 1455.165261] ? __pfx_security_inode_init_security+0x10/0x10 [ 1455.165279] ? crc32c+0x1ae/0x350 [ 1455.165295] ext4_bread+0x2e/0x1a0 [ 1455.165312] ext4_append+0x224/0x530 [ 1455.165333] ? __pfx_ext4_append+0x10/0x10 [ 1455.165353] ? __pfx___ext4_new_inode+0x10/0x10 [ 1455.165377] ext4_init_new_dir+0x13c/0x240 [ 1455.165390] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 1455.165409] ext4_mkdir+0x3c5/0xb30 [ 1455.165425] ? __pfx_ext4_mkdir+0x10/0x10 [ 1455.165438] ? security_inode_permission+0x72/0xe0 [ 1455.165459] vfs_mkdir+0x59a/0x8d0 [ 1455.165476] do_mkdirat+0x19f/0x3d0 [ 1455.165498] ? __pfx_do_mkdirat+0x10/0x10 [ 1455.165520] __x64_sys_mkdir+0xf3/0x140 [ 1455.165537] do_syscall_64+0xbf/0x390 [ 1455.165554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.165568] RIP: 0033:0x7f6c3639bc27 [ 1455.165578] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.165590] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1455.165602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639bc27 [ 1455.165611] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1455.165619] RBP: 00007f6c33912040 R08: 0000000000000000 R09: 0000000000000000 [ 1455.165627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1455.165638] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1455.165655] [ 1455.182599] ENOMEM in journal_alloc_journal_head, retrying. 13:29:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:10 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1455.221525] No source specified 13:29:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 29) 13:29:10 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x111113a4, [{@any, 0x3, 0x7f, 0x0, "9d0609", 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x7d, 0xd, '\t\x00', 0xfff, 0x7f}, {@none, 0x5, 0x80, 0x5, "077905", 0x202, 0x7}]}}}, 0x31) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) [ 1455.284083] No source specified 13:29:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 30) 13:29:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1455.914932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1455.915596] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1455.916320] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1457.127762] Bluetooth: hci0: command 0x0406 tx timeout [ 1457.959716] Bluetooth: hci5: command 0x0406 tx timeout [ 1457.960418] Bluetooth: hci3: command 0x0406 tx timeout 13:29:20 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:20 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="224580deeb4e2f5c7080a00ee9013ba52f77cf7797dc8ab6f00ddfae580f99c71938942c57e2f21be9a8e504e8207659b48986ba2ea622e87b80d45c1324c19cf5e80451b2e9150980bf7691b88087c8bde031abf046dd73a65a423afbf1ed1263a384202bc28a9c57f7f3b40e497d7f8d37675a72058bab53510732d1852fbb48bddec402c1dbc42b01b6cc815fb792340bb289867fc248070f6ca3b300e34eb0df04000b6e"], 0x7) 13:29:20 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:20 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 31) [ 1465.590947] No source specified [ 1465.605150] random: crng reseeded on system resumption 13:29:20 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:20 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 32) 13:29:20 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) [ 1465.783081] No source specified 13:29:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1465.933138] random: crng reseeded on system resumption 13:29:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 33) 13:29:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x40, 0x2, 0x2, 0x5, 0x0, 0x8, 0x24000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x3f, 0x1}, 0xa000, 0x3, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x621fbaae0ce19f60) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:29 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:29 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) 13:29:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c"}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1474.538426] random: crng reseeded on system resumption [ 1474.552056] FAULT_INJECTION: forcing a failure. [ 1474.552056] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.553845] CPU: 0 UID: 0 PID: 27349 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1474.553880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.553896] Call Trace: [ 1474.553905] [ 1474.553915] dump_stack_lvl+0xfa/0x120 [ 1474.553951] should_fail_ex+0x4d7/0x5e0 [ 1474.553989] should_failslab+0xc2/0x120 [ 1474.554028] __kmalloc_cache_noprof+0x73/0x6a0 [ 1474.554055] ? __might_fault+0xe0/0x190 [ 1474.554105] ? copy_mount_options+0x55/0x180 [ 1474.554153] ? copy_mount_options+0x55/0x180 [ 1474.554192] ? memdup_user+0x95/0xe0 [ 1474.554220] copy_mount_options+0x55/0x180 [ 1474.554263] __x64_sys_mount+0x1ab/0x310 [ 1474.554301] ? __pfx___x64_sys_mount+0x10/0x10 [ 1474.554338] ? do_user_addr_fault+0x43a/0x12b0 [ 1474.554381] do_syscall_64+0xbf/0x390 [ 1474.554415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.554442] RIP: 0033:0x7f6c3639e04a [ 1474.554462] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.554488] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1474.554514] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639e04a [ 1474.554532] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1474.554548] RBP: 00007f6c33912040 R08: 00007f6c33912040 R09: 0000000020000000 [ 1474.554565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1474.554582] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1474.554615] 13:29:29 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x8a) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04f50a000037113434771b5f0000000012160000"], 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "16b64e38f4a1e46a"}}}, 0x11) 13:29:29 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x736b1cdf, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c"}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 34) 13:29:29 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1474.772201] No source specified [ 1474.774769] random: crng reseeded on system resumption 13:29:29 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043b0a00000100002d806bdb00d0265d57ccc08835227e27504733067abdba980df08f35f6c36600080000b7eb622db681cf5d7c9633f9f837bf3d4f32a68606d78fd10801b56ed6f48f08c093"], 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:29:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 35) 13:29:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1474.870435] FAULT_INJECTION: forcing a failure. [ 1474.870435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.871407] CPU: 1 UID: 0 PID: 27722 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1474.871425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.871433] Call Trace: [ 1474.871439] [ 1474.871443] dump_stack_lvl+0xfa/0x120 [ 1474.871465] should_fail_ex+0x4d7/0x5e0 [ 1474.871486] _copy_from_user+0x30/0xd0 [ 1474.871504] copy_mount_options+0x76/0x180 [ 1474.871528] __x64_sys_mount+0x1ab/0x310 [ 1474.871547] ? __pfx___x64_sys_mount+0x10/0x10 [ 1474.871565] ? do_user_addr_fault+0x43a/0x12b0 [ 1474.871587] do_syscall_64+0xbf/0x390 [ 1474.871605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.871621] RIP: 0033:0x7f6c3639e04a [ 1474.871633] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.871649] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1474.871663] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639e04a [ 1474.871672] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1474.871680] RBP: 00007f6c33912040 R08: 00007f6c33912040 R09: 0000000020000000 [ 1474.871689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1474.871697] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1474.871713] [ 1474.910186] No source specified 13:29:38 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x1, 0x81, 0x3, 0x0, 0x3, 0x4411, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x7d, 0x4}, 0x10000, 0x1, 0x4, 0x7, 0xaa8e, 0x9, 0xad26, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x1, 0x62, 0x0, 0x0, 0xffffffff, 0x42020, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xf4, 0x2, @perf_bp={&(0x7f0000000140), 0x5}, 0x43000, 0x6, 0xfff, 0x5, 0x6, 0x3da, 0x3fc0, 0x0, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0xd, r0, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x3, 0x9, 0x3}) ioctl$LOOP_CLR_FD(r1, 0x4c01) 13:29:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:38 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c"}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:38 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xb4, 0x4}, {0xb97a, 0x2}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043b0300000000000000040000"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0xb2}, "025545e5b5f489557c77e66006f76966db583bc7f9cfffc2e71d8d461d4e8fa0fa30acccc659492d67a3b5cb2cbcf8f2727a2692f09a8f6ee8ca76a1b89feb2c88ffabbfbd2c5f6a912e16d19f47e0aba83f1b058a722174e935a31dfcb96074ac56738b988538f8fdf46206eed6c220da4f3deefd07844e10a278cffab6579f12651587f8cb4cc889a0cfdc1a91fafc3e3480abfc82d822f4c69d7a2f0d25f80984a4f7938a918c0befe776f4cc47700b1c"}, 0xb6) 13:29:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:38 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 36) [ 1483.419197] random: crng reseeded on system resumption 13:29:38 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:38 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1483.481429] FAULT_INJECTION: forcing a failure. [ 1483.481429] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.483186] CPU: 0 UID: 0 PID: 27908 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1483.483218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.483232] Call Trace: [ 1483.483240] [ 1483.483249] dump_stack_lvl+0xfa/0x120 [ 1483.483282] should_fail_ex+0x4d7/0x5e0 [ 1483.483315] ? getname_flags.part.0+0x48/0x540 [ 1483.483339] should_failslab+0xc2/0x120 [ 1483.483374] kmem_cache_alloc_noprof+0x72/0x680 [ 1483.483408] ? getname_flags.part.0+0x48/0x540 [ 1483.483429] getname_flags.part.0+0x48/0x540 [ 1483.483455] getname_flags+0x95/0xe0 [ 1483.483484] user_path_at+0x27/0x90 [ 1483.483514] __x64_sys_mount+0x1fb/0x310 [ 1483.483548] ? __pfx___x64_sys_mount+0x10/0x10 [ 1483.483590] do_syscall_64+0xbf/0x390 [ 1483.483619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.483650] RIP: 0033:0x7f6c3639e04a [ 1483.483668] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.483690] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1483.483714] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639e04a [ 1483.483729] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1483.483744] RBP: 00007f6c33912040 R08: 00007f6c33912040 R09: 0000000020000000 [ 1483.483759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1483.483774] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1483.483805] 13:29:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1483.514453] random: crng reseeded on system resumption 13:29:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:38 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1483.646115] random: crng reseeded on system resumption 13:29:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 37) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:48 executing program 0: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x341, @remote, 0xc}, {0xa, 0x4e25, 0x2, @private1, 0x200}, 0x6, [0x7334, 0x3, 0x6, 0x0, 0x401, 0x1, 0x9, 0x80000001]}, 0x5c) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040104000000014e08708fe1eda3c71632d4c18b279fa59efff7ef4bddf6a2cab39cc328ecce47c394511d5b60a14e5a431e90a59224ce2c7e3606f060a1f507f8ce3efbfdc1bf755f768d85af9c07e8a6c227792ccc431a04544462844f516562575101496cc7b67703000000000000002466d55d54d09ccce3c70d2cf75946ce8979113abe69aac93ca8d1c9775743c26bbd68f371a0d4e97d"], 0x7) 13:29:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) write$nbd(r2, &(0x7f0000000180)={0x67446698, 0x0, 0x0, 0x1, 0x4, "69268a70e1464bc03a568792718771e882bb5916abc7677b7d7f639f209ae7bcb4ce153898750a21224891815a72cad71596faf7"}, 0x44) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x56, 0xa8, 0x1, 0xd, 0x0, 0x8, 0x1242, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x4080, 0x5, 0x1000, 0x8, 0x7bc2, 0x9, 0x265, 0x0, 0x8, 0x0, 0x3}, r0, 0x10, r1, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) signalfd4(r3, &(0x7f0000000140)={[0x784]}, 0x8, 0x800) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) fcntl$setstatus(r3, 0x4, 0x40800) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) [ 1493.231157] No source specified [ 1493.249299] random: crng reseeded on system resumption 13:29:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 38) 13:29:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:29:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1493.394386] FAULT_INJECTION: forcing a failure. [ 1493.394386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.396366] CPU: 0 UID: 0 PID: 28426 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) 13:29:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1493.396398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1493.396412] Call Trace: [ 1493.396420] [ 1493.396428] dump_stack_lvl+0xfa/0x120 [ 1493.396461] should_fail_ex+0x4d7/0x5e0 [ 1493.396494] strncpy_from_user+0x3b/0x2f0 [ 1493.396533] getname_flags.part.0+0x8d/0x540 [ 1493.396560] getname_flags+0x95/0xe0 [ 1493.396589] user_path_at+0x27/0x90 [ 1493.396620] __x64_sys_mount+0x1fb/0x310 [ 1493.396662] ? __pfx___x64_sys_mount+0x10/0x10 [ 1493.396707] do_syscall_64+0xbf/0x390 [ 1493.396736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.396759] RIP: 0033:0x7f6c3639e04a [ 1493.396777] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.396799] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1493.396822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639e04a [ 1493.396837] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1493.396851] RBP: 00007f6c33912040 R08: 00007f6c33912040 R09: 0000000020000000 [ 1493.396866] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1493.396880] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1493.396909] 13:29:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0xffffffff}, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) 13:29:48 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "2963e7ddc139e5819e5c6b246ba09c4f30e83c8291ad47b39414a3323b67cc00adf93478da2bc8c3c420e9016616d465a62bb3ce255df0a4218a320043383dca2406e6130bab67565dc2b1862ab43c4590864266a556e1ab6f9bafde0f58421ec0a445b606553863768b7a06864bc8d0247e120f531f615cf3bea0a11c4e8e4da69173e34edca567a7920629bda41df488ceea750d802d17c56bab76dd2e9e228f946f3fed0f9db1b32bd26b5cd6128e5d7ee3e5"}, 0xb8) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0401043a4ce6e2"], 0x7) 13:29:48 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1493.612981] random: crng reseeded on system resumption 13:29:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 39) 13:29:48 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(0x0, 0x0) [ 1493.782312] FAULT_INJECTION: forcing a failure. [ 1493.782312] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.784528] CPU: 0 UID: 0 PID: 28719 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1493.784562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1493.784576] Call Trace: [ 1493.784584] [ 1493.784593] dump_stack_lvl+0xfa/0x120 [ 1493.784629] should_fail_ex+0x4d7/0x5e0 [ 1493.784671] should_failslab+0xc2/0x120 [ 1493.784707] __kmalloc_cache_noprof+0x73/0x6a0 [ 1493.784731] ? find_held_lock+0x2b/0x80 [ 1493.784769] ? __get_fs_type+0xe6/0x160 [ 1493.784802] ? alloc_fs_context+0x58/0x9e0 [ 1493.784837] ? alloc_fs_context+0x58/0x9e0 [ 1493.784864] ? _raw_read_unlock+0x1e/0x40 [ 1493.784886] alloc_fs_context+0x58/0x9e0 [ 1493.784921] path_mount+0xd87/0x2130 [ 1493.784955] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1493.784985] ? __pfx_path_mount+0x10/0x10 [ 1493.785017] ? kmem_cache_free+0x2a4/0x540 [ 1493.785045] ? putname.part.0+0x11b/0x160 [ 1493.785067] ? getname_flags.part.0+0x1c6/0x540 [ 1493.785094] ? putname.part.0+0x11b/0x160 [ 1493.785120] __x64_sys_mount+0x293/0x310 [ 1493.785153] ? __pfx___x64_sys_mount+0x10/0x10 [ 1493.785195] do_syscall_64+0xbf/0x390 [ 1493.785226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.785250] RIP: 0033:0x7f6c3639e04a [ 1493.785269] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.785292] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1493.785316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639e04a [ 1493.785332] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1493.785347] RBP: 00007f6c33912040 R08: 00007f6c33912040 R09: 0000000020000000 [ 1493.785362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1493.785378] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1493.785409] 13:29:57 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x1, 0x9, 0x8, 0x0, 0x3f, 0x25140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9c, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x4810, 0x6, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0x5, 0x0, 0x9}, r1, 0x2, r0, 0xb) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:29:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:29:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(0x0, 0x0) 13:29:57 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:57 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x19}, "4f212cd2880729b088ba5c3832905a67e0528b0fb9cb09d9fa"}, 0x1d) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x5d}, @l2cap_cid_signaling={{0x59}, [@l2cap_disconn_rsp={{0x7, 0xd2, 0x4}, {0x8c0}}, @l2cap_conf_req={{0x4, 0x5, 0xb}, {0x7f, 0x3, [@l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x7e, 0x8}, {0x101, 0x5f74, 0x9, 0x8}}, @l2cap_move_chan_req={{0xe, 0xfd, 0x3}, {0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x6, 0x2}, {0x1000}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x951c, 0xb0b}}, @l2cap_info_req={{0xa, 0xef, 0x2}, {0x3f}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x7, 0x4, 0x6}}, @l2cap_conn_rsp={{0x3, 0xf7, 0x8}, {0x5, 0x7f, 0x0, 0x401}}]}}, 0x62) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0x1, 0xe8}, "228447319358b87fee08d1aa28ab5aa8c08a1beb97f1e4165972aeb09955791b6bcf46bfb1f9ebe45067f997316690a470b1ded7450b20e5b243d16f5153506e9b48ecdaabfbb2e2262ddf80b4c9bb543cecfc132d866fed4e87f5e6d1778cd03584ffea3beff1702b402109aa34934985434028f3b67d2739729965bfb02f3719d29bd727b078583fa42ebc95e35cec0d5530dd1207d7182692678d1f4fa20e494568c9091c99843c286d9d0449c0cf9fbc43dfe27f02b5fe6f10b610c94e7f8f2b30dd9cc7c00c903319a9b4b7b401fee887660852c6564e3bc101ced4f665e9c63c27094bed1d"}, 0xec) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe}, "27bb84e7061720f89b9a186d5786"}, 0x12) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044809032551e1c4a3f67600"], 0xc) 13:29:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 40) 13:29:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:29:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) [ 1502.688574] random: crng reseeded on system resumption [ 1502.740834] No source specified 13:29:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) [ 1502.759578] random: crng reseeded on system resumption 13:29:57 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:29:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(0x0, 0x0) 13:29:58 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="14e6b77d63863b4868f01df1cc3683e336aff49002ceaf3e2eb964d3239092303fff52a8c2dbee4d77fa501e709a9f5aaddc7cbf00ded4626485adda2d6ffc3fe57cbc4b"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x47}, @l2cap_cid_signaling={{0x43}, [@l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x1dd0, 0x80, 0x2, 0x29}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x20, 0x4891}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0x81, 0x2, 0x8}}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0x47, 0xada5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x74, 0x2}, {0x78b}}, @l2cap_cmd_rej_unk={{0x1, 0x76, 0x2}, {0x8a9}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x1, 0xa0, 0x0, 0x1}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0x6}}]}}, 0x4c) 13:29:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 41) 13:29:58 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:29:58 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1502.889839] random: crng reseeded on system resumption [ 1502.964365] FAULT_INJECTION: forcing a failure. [ 1502.964365] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.965366] CPU: 1 UID: 0 PID: 29245 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1502.965382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.965390] Call Trace: [ 1502.965395] [ 1502.965400] dump_stack_lvl+0xfa/0x120 [ 1502.965420] should_fail_ex+0x4d7/0x5e0 [ 1502.965439] should_failslab+0xc2/0x120 [ 1502.965458] __kmalloc_cache_noprof+0x73/0x6a0 [ 1502.965471] ? __create_object+0x59/0x80 [ 1502.965485] ? fat_init_fs_context+0x51/0x5e0 [ 1502.965499] ? trace_kmalloc+0x1f/0xb0 [ 1502.965518] ? fat_init_fs_context+0x51/0x5e0 [ 1502.965531] fat_init_fs_context+0x51/0x5e0 [ 1502.965546] vfat_init_fs_context+0x1c/0x70 [ 1502.965562] ? __pfx_vfat_init_fs_context+0x10/0x10 [ 1502.965577] alloc_fs_context+0x570/0x9e0 [ 1502.965597] path_mount+0xd87/0x2130 [ 1502.965614] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1502.965630] ? __pfx_path_mount+0x10/0x10 [ 1502.965650] ? kmem_cache_free+0x2a4/0x540 [ 1502.965664] ? putname.part.0+0x11b/0x160 [ 1502.965679] ? getname_flags.part.0+0x1c6/0x540 [ 1502.965692] ? putname.part.0+0x11b/0x160 [ 1502.965705] __x64_sys_mount+0x293/0x310 [ 1502.965722] ? __pfx___x64_sys_mount+0x10/0x10 [ 1502.965743] do_syscall_64+0xbf/0x390 [ 1502.965759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.965772] RIP: 0033:0x7f6c3639e04a [ 1502.965781] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.965793] RSP: 002b:00007f6c33911fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1502.965805] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3639e04a [ 1502.965813] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1502.965821] RBP: 00007f6c33912040 R08: 00007f6c33912040 R09: 0000000020000000 [ 1502.965829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1502.965836] R13: 0000000020000100 R14: 00007f6c33912000 R15: 0000000020002640 [ 1502.965852] 13:30:06 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = signalfd(r0, &(0x7f0000000140)={[0x3000000000000000]}, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1f, 0x4, 0x3f, 0x1, 0x0, 0x5, 0x20000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x8004, 0x46, 0x5, 0x0, 0x0, 0x10000, 0x100, 0x0, 0x81, 0x0, 0x7fff}, 0x0, 0xa, r1, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) dup(r2) 13:30:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:06 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 42) 13:30:06 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0xf7, 0xc8, 0xd8, 0x1, 0x4, 0x8000}}}, 0xe) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:06 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1511.640779] No source specified 13:30:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:30:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:15 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x15}, @l2cap_cid_signaling={{0x11}, [@l2cap_disconn_req={{0x6, 0x5a, 0x4}, {0x9, 0x3f}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x2, 0x8, 0x2}}]}}, 0x1a) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04d4adf05ddf5fc61f02000000000000000000005dae4dd92ee794048ee2352e0843365e95ea84b11fb4793cbaf2b49b79bb7dcb8f5cb036abcbcc97ab9c19ee913af3fb21e23f5d7af789a6b6fefb59afe948dfaf64943f671eb60cb0fb6a49579c11eb3aca40e7c60b4aa2d763d6b346223c06ca75ee63dbdca2af0636b3585f60a633a49351bc960cc84ae82d34b553bdc17c2f4fdac39ac8ba61028ca8c496c38066471230dbfea797fd36be1507668d4a9d73131196b8c7e2bf32225495253b1ec8e92a44b890e311eb9ff5b433d100050000000000000000000000000000000000000000000000000008055a4744"], 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) (fail_nth: 43) 13:30:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:15 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x4040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x20, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8001) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:30:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x381, 0x6}, 0x12800, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x8) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:30:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1519.972438] No source specified 13:30:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1}}}, 0x7) [ 1519.982882] FAULT_INJECTION: forcing a failure. [ 1519.982882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.983993] CPU: 1 UID: 0 PID: 29739 Comm: syz-executor.5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1519.984011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1519.984020] Call Trace: [ 1519.984025] [ 1519.984030] dump_stack_lvl+0xfa/0x120 [ 1519.984051] should_fail_ex+0x4d7/0x5e0 [ 1519.984072] _copy_to_user+0x32/0xd0 [ 1519.984091] simple_read_from_buffer+0xe0/0x180 [ 1519.984108] proc_fail_nth_read+0x18a/0x240 [ 1519.984128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1519.984147] ? security_file_permission+0x22/0x90 [ 1519.984167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1519.984185] vfs_read+0x1eb/0xc70 [ 1519.984205] ? __pfx_vfs_read+0x10/0x10 [ 1519.984222] ? lock_release+0xc8/0x290 [ 1519.984241] ? __fget_files+0x20d/0x3b0 [ 1519.984262] ksys_read+0x121/0x240 [ 1519.984278] ? __pfx_ksys_read+0x10/0x10 [ 1519.984300] do_syscall_64+0xbf/0x390 [ 1519.984317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.984331] RIP: 0033:0x7f6c3634f69c [ 1519.984341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1519.984354] RSP: 002b:00007f6c33912170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1519.984366] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f6c3634f69c [ 1519.984375] RDX: 000000000000000f RSI: 00007f6c339121e0 RDI: 0000000000000004 [ 1519.984384] RBP: 00007f6c339121d0 R08: 0000000000000000 R09: 0000000020000000 [ 1519.984392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.984400] R13: 00007ffc40e9bfff R14: 00007f6c33912300 R15: 0000000000022000 [ 1519.984417] [ 1519.992033] random: crng reseeded on system resumption 13:30:15 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14, 0x80000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) r3 = perf_event_open(&(0x7f0000002800)={0x5, 0x80, 0x2, 0x3, 0x2, 0x4, 0x0, 0x2, 0x40001, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffff001, 0x0, @perf_config_ext={0x5, 0x3f}, 0x41a, 0x7, 0x6, 0x9, 0x7ff, 0x6, 0x2, 0x0, 0x1000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000028c0)={&(0x7f0000002880)=""/4, 0x4}) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000002980)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000029c0)) [ 1520.198622] No source specified [ 1520.201154] random: crng reseeded on system resumption syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x8, &(0x7f0000002640)=[{&(0x7f0000000100)="43ee01a8db77f148e02ce3dacf53700e23487e51084c3e5adc4bf9d1c79e9270d012e566fc2a350bccabedab9505163cedb1728a35c722cd94a50b18baa959feb03b155e7d3e75ce805a8b487f61e9b4914624043a10b9e6e14e420b0a665d2493c70314a38b17bd0d656e69764b68d79857f080992577187b5e2b2f63d76437341856014ec58fe0cd9882df017a4019fc7e660da19de8ee1744a21c4a21b9aaa73309acafa41e699f5aaa1b26cce8e4459cc7588a72ad7a40d85e203fb5ac10e273876d7ed5a92b95d1835387155250e311db0ba70ca77004ed365fa86834ba2a55f57e3819b8b3557ecfb6", 0xec, 0x1}, {&(0x7f0000000200)="22335b99332f2ae11fceeb1d3159a8a0d35466f94fb54c22d2634fa7b6a44b2662bc47bc120efba034a3562572c402dae31a9db29f2b60f168880bc9e6691f78543ea0bb0a09e08f7765126616c08b0f4f475a8af09904fe8fe8259b61731a255d19b40faf1cee0ba05f2b3fd328d10b972381f1a3952a6501e1990973f74ef22755ce34e833c72b5893f2476b2ebada8518631915ff95cad5f1b52732", 0x9d, 0x6}, {&(0x7f00000002c0)="a8bc3379f733dd979a21be9d1c", 0xd, 0x2}, {&(0x7f0000000300)="024d9d06868681d5e04e769e3c2f67b489fe5ed58c71add2fe04817cda", 0x1d, 0x1}, {&(0x7f0000000440)="bf7187ae4f94acda2faf0e363d3e6564ba143499b6d867c71ea5b90d9214a00fed171b38ffc1c507e997f9f4221e9945b2f3e57a4ae9ea3e32f4e627af1f2ece7730999e5fb7ddca7abb40cb07757c5ceb89404dc8dc07db15f7273560a2b868e2ce94617dcf6e265af093398e5c056d1fdc571ebf6559c9175013f4fa6e52257de43f11ef4b18e39446335f38107b11df5075c300d40bfcefdcffc8dbf4cf3a631ca72214e362dccdef8efb2d9f730ada85dcb5ee528bda00932072c15eaa2e341da044104c3a30aeba0aae847e4bb4d86e9c7f853e114e8e02477cf8581d9129e145c3d82d1b", 0xe7, 0x8000000000}, {&(0x7f0000000540)="9a4d8996796b6633aca29dd12bd566366de3622d6c237b99f73813df60fecd5c1cd7c789fd15248da7c731ee37b77e7e61387a423b53c056df6348d657b3ce4ab72021c8e7a4e02ea74442141bee067d8b4fbb3e04bd97657e0b53076665cb3fb1ebb8071d3460085f4c3e94521cc7cc40fd654cf4d48478df032e86dec8d6739338c313999788217cd8bf4a59a08bd51933797a521bff8df8413233c2e58b837f2685126656456798e16905c287b732b62b76d87f48911d0beb7d346c311941fe", 0xc1, 0x100000000}, {&(0x7f0000000640)="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", 0x1000, 0x4}, {&(0x7f0000001640)="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", 0x1000, 0xfffffffffffffff8}], 0x200400, &(0x7f0000002700)={[{@noload}, {@barrier}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@noinit_itable}, {@commit={'commit', 0x3d, 0x7}}, {@journal_path={'journal_path', 0x3d, './file0'}}], [{@fowner_lt={'fowner<', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x200}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ','}}, {@permit_directio}, {@appraise}]}) perf_event_open(&(0x7f0000002900)={0x4, 0x80, 0x3, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_config_ext={0x7, 0x5e2e}, 0x0, 0xfffffffffffffffa, 0x7, 0x2, 0xc4c, 0x100, 0x7, 0x0, 0xe63c, 0x0, 0x7}, 0xffffffffffffffff, 0xb, r3, 0x0) 13:30:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:30:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1}}}, 0x7) 13:30:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:15 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "714b46dd72b91e785433fca71b3cb18947e90fe28f06d9c2d8e8504ff4bcdaebfce4f38277264f52df6cf3d9220d09c56796110dbdd185b8accf35ac8cc7d6ef94e0866a42b3ec5d9a91c7666b1effd799bf71e637deff36db3051df890ad9e0deb1636eecd1afcf32830dfc98255db2c164fd2acdbf1bc5b374f8dc3d44dd8e71c7a14692bbdb1bb673017a3ef7d802e68d1a940a732e64fd7de9ffed86d249a0130251d8aa453621b6a56d357a8befdd29414bf6248132907529964f608d3212daefbf47bcf8ecd8c181025db45ff875f22f1bb34a3bf29841cdd353f0f58bf262a75b9ddf7ec8bcd1b61f9d80c5"}, 0xf3) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:25 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1}}}, 0x7) 13:30:25 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x100}}}}, 0xf) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:25 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:30:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xf7, 0x80, 0x4, 0xd5, 0x0, 0x0, 0xe9ffdadd2c61a3e9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1b, 0x4, @perf_config_ext={0x3}, 0x8001, 0x2, 0x7, 0x9, 0x9, 0x1, 0x7f, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r0, 0xa) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000100)="85d9a18b87b0c81c8b43f7da643070bc3d88acf5a3feab0b7eae7f89b62a221f9542562c50fd5075b9e9c3d3f00f62a5ac162b0108ff9cc258bb1a377d79faef433704989d2aa8f9e246c861104c6a25087dc53407ec3a96005033ce0980a3a61b87ba727ff9e7b2f1", 0x69}, {&(0x7f0000000180)="96d52781ce86a28422ddaf86dbcdf18a326430444d83dac9011a5e6ac58326496e61c9464a9cf6a08e1c898b21b1afd76b7fa5d0db70109cac6571e996c5e55389f74dd90fa99ce21acfa20fdb5e1916c88efba198f3baf89b636a5d00d9693fd90c188f83a45e33f545a6fe91335af24c565fe2b9009e700a710934b909ddff1ea23b390d9a9517ebe2bae379d00cf18db574bec8df78", 0x97}, {&(0x7f0000000240)="d450986a2a2475e7494d4feab50e978b1b3f5f5516f9211281a31f3e7abf5d64c896f430d9f05e8518ef474464c86503440e1c363a2f89c6c4345e81ddc548c7f91476d58095b0e02f93c9c2a4e094d05700ca79c031", 0x56}], 0x4) fcntl$setstatus(r2, 0x4, 0x4000) 13:30:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:30:25 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1530.437775] No source specified [ 1530.441376] random: crng reseeded on system resumption [ 1530.448261] No source specified 13:30:25 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {0x0}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1530.475874] random: crng reseeded on system resumption 13:30:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) [ 1530.599322] No source specified 13:30:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:30:25 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1530.608522] No source specified 13:30:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) [ 1530.683965] random: crng reseeded on system resumption 13:30:25 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) [ 1530.744173] random: crng reseeded on system resumption 13:30:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 13:30:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x578, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000080), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x0, 0x6003, 'ip_vti0\x00', 'syzkaller0\x00', 'bridge0\x00', 'lo\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x7273ae47d6210b32, 0x0, 0xff, 0xff, 0x0, 0xff], 0xf6, 0xf6, 0x126, [@ip={{'ip\x00', 0x0, 0x20}, {{@dev={0xac, 0x14, 0x14, 0x16}, @empty, 0xff, 0x0, 0x8, 0x89, 0x0, 0x0, 0x4e22, 0x4e21, 0x4e24, 0x4e22}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x4, 0x7ff, 0x1, 0x4}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x72, 0x88b5, 'syz_tun\x00', 'sit0\x00', 'team0\x00', 'macsec0\x00', @random="360a319a4e56", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0xe611bf9ba5806eca, 0x0, 0xff, 0xff], 0x6e, 0xee, 0x136, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}, @common=@ERROR={'ERROR\x00', 0x20, {"e4c83bb5b9e2d4ac8cda24b0aa0d546861ffcfbf6681529af311b2c93c0b"}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x40, {0xb7e}}}}}, {0x5, 0x1, 0xf8, 'syzkaller1\x00', 'wlan0\x00', 'ip_vti0\x00', 'bridge_slave_1\x00', @random="74be780ca4fd", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xee, 0x11e, [], [@common=@log={'log\x00', 0x28, {{0x2, "63b28534092dcdc4c634aca11c23222c0a11e2ff2a400ddb898368a41cf0"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0xb6496da5e0f83a83, 0x16, 0x12, 'batadv_slave_1\x00', 'batadv_slave_0\x00', 'netdevsim0\x00', 'wg0\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x2565a93d8de87ace, 0x0, 0xff], 0x10e, 0x10e, 0x13e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x0, 0x1, 0x0, 0x2}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x17, 0x8808, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x15}}}], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x5f0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) [ 1530.786902] No source specified [ 1530.834821] random: crng reseeded on system resumption 13:30:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:26 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:30:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1530.990522] No source specified [ 1530.998823] No source specified [ 1531.097576] random: crng reseeded on system resumption 13:30:35 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x102e}, @l2cap_cid_signaling={{0x102a}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x6, 0x374b, 0x1000, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x20, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x82, 0x2}, {0x9}}, @l2cap_info_rsp={{0xb, 0x0, 0x1004}, {0x2, 0x8, "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"}}, @l2cap_move_chan_rsp={{0xf, 0x64, 0x4}, {0x400, 0x1ff}}]}}, 0x1033) 13:30:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x0, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:35 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9c10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) sendfile(r0, r1, 0x0, 0x7) close_range(0xffffffffffffffff, r0, 0x0) 13:30:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1540.406355] No source specified [ 1540.413922] No source specified 13:30:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x5775, 0x0, &(0x7f0000000100), 0x2080, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@block_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@prjquota}, {@i_version}, {@test_dummy_encryption}, {@dax}], [{@smackfshat}]}) 13:30:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x0, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1540.483783] random: crng reseeded on system resumption 13:30:35 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:35 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x6, 0x9, 0x5, 0x4, 0x5c}}}}, 0x17) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x3b}, "871221ee94da697014454db2e7fd27ee470dad672cac73e076157d310c90e29ecb965b50da9cfffddd5393bfd46b9f10b51b7c84af2ad2e7416359"}, 0x3f) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x1, 0xc8}, @l2cap_cid_signaling={{0xc4}, [@l2cap_conf_rsp={{0x5, 0x80, 0x28}, {0xf916, 0xae9, 0x9fa, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0xf8, 0x1, 0x3, 0x5}}, @l2cap_conf_ews={0x7, 0x2, 0xb1b}, @l2cap_conf_flushto={0x2, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}]}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x3, 0x8}}, @l2cap_conf_req={{0x4, 0x9, 0x4}, {0x5, 0x8000}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x5}}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x800, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x7, 0x20}}, @l2cap_info_rsp={{0xb, 0x1, 0x5c}, {0x68, 0x2f, "5ee016efbb2beaf8840238944ec6c5261b48daecf8a7417e153ab0a5f28612211a20cec552736fe9ddb822e50ea443f09c55ca614dcd4451a177dc8f938484bf6af849f983ae93fdd1d6fd6eb4aca81013b4f40c74fabe6b"}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x1ff, 0x34a0, 0x0, 0x1ff}}]}}, 0xcd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_disconn_req={{0x6, 0x20, 0x4}, {0xfffa, 0xfff}}, @l2cap_create_chan_rsp={{0xd, 0xfe, 0x8}, {0x6, 0x3, 0x1, 0x1000}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0xc1, 0xffff}}]}}, 0x25) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0x0, 0x70}, "a471b917232751914799ed70fd528b66d5a7ecb773b6eabac8f47eb104b10b9af34e7749f05f74a7907b2f1a26b7a4f8ef0a1fb26d4be6d446afd49cdece603da12251cef9ee4e8c6e8c381feda7a82b471ceecac6b2e0d603d586c72780472eaff3d41e531968210120fe9fc5f2c124"}, 0x74) 13:30:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x0, 0x4, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1540.846970] No source specified 13:30:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:36 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x0, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1541.099604] No source specified 13:30:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:30:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x0, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:46 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x240800, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x6, 0x100000000, 0x4, 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='.\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5390, &(0x7f0000000440)=@disckey={0x2, 0x3, "bd494e697222b1c848d986139bc9440fbd6a5490ee2aa81153247798eea136ea788a3708dbbc32b16737408f573cd8aa62a892b49e3ef3ab9f1434061b4c41b9bd72048ec8eac86249ef119c29b47e74a27d9a0d066696f861f5ee71f86b46b6ff53475e6eb19ec9ecf19e9dd4776081f686096c1a6eebc15bcb80e6a3071fc8fbf2941e747582b232cf1874522bfdb8dc8ae31df2faca0ae9f5c850d23bb9657f66ed8c7514fe9cac7c15a79a3f75c015bfd9686e6b65e40175a295af227a36ca7c0c07e0e7af1036a6af5f88f32177baf41d41da168a82edd49ef3755f8f4f7a4f267c54928da50a206cf4f6e60e324329e5aa93bdea06d9e331c6ee27ccf45f742bd72626db1ab29b789433d3a6b157d923a699b6affbc12d5bee0e71cc7f9862ae9340c2fbcce3e2fd6223f9d0188e6dbc4896ef40640dced3a4ff620912b834dd895c0b686504f7cbb944053525ddf75086cfc25142862f794cce0e2185e6e77f81d8ee947c6387c4e53ef82745dbae840dd27ab71eae23cb52a44a81053f2659a6fa6b167cd25d5a3a45af8402f6ccc6c1b91fb25fbd57498e57c7039016b3994ccbeebe350485cbf9f6377bfd02d85a9a0680d1f96b6e2ee32ed67b262e997464b478614ae0d03305f96d5ad3dbf9ece8b0c32580060fa3ff9c34d9ed648fc1f7f5c7a1c7ed160d18a26f0652472f63ec35cddadeb5ea7658040656c92941069897f6057656acd4167378b293ea1ca954142c4e045edc6535b024388435f7c10bbf9781fcf971628518f9bcfb8d6b33fbee839a62f6218138317ae4730b69ee1d7b54dc9c352c66e88545ef724dcb1f45b29907f8cec0dfd1d4e73df36e2c61c2a9818b991b0d421516131ddfef3b786dac8100e7a1da1fb28675e29fd012b75fc9052b1f56eeb3228e7df4e3add1daf8e4ee16b6910663768686684274fb5b8eac8282fb4fcef37342d63ba50db1c09fb361e6202bf3f6c4643cee7b504a37c84ca449bdea090b035b8e5771ad38058fd39f3abd1660b7d70c193556c67017605e337557501e84f62b9aecb57847acb4f2c0d28abcb566df535cd486b835bbd800346a875bcb91119779c66b8803aa7503fddb07ebf9418438edae7c10f6248a3bc33d85ab0e3bed28d29bf27853399c22491a6ed09864d7e5a848374bb4e7888d7c28a4836215771e40ad289df11381da655bb58067f2550f51394ee778a2456b8db3ba94465412a47b9995cc92d2fa79587d4dc776fc5186e292b6429eceb830a84de4ca9e3d43ac578d700c8d5b4d4f0a6938ed2a92b2849890ac188a5a36034d531aae5cbfa77cbcac463ac5822a51fec4082ac81bc281635b228c8c33998e48de4aa7efd835bc8b82c929d458094204c3f7e1b55cb04ddc93969707de00faea1c0c1a719bfc86911b2c238c32d180109333ae9aacdbbe2e2a0268129477a2b1f6d60f88af5d17cf59d75e12d0c259d12dd6f68aaebfe712a0f504fd685eee6547bbd81ffe3bf193c18a75fcdfd54d604443944e0ed82201bf0081394b2e63c3100784deb00746ecfa9066afa01d56685ade8ff9bb197e7509d669a389aa78e0dbb262557d65cdc1e5236a91ccb672ba911296f97b0536ddffce8d8e9d9292fa5477be29fc144a43de2021769abd3bca0a43054bd66fbe90cb99dafaaad7a22ba79f65531218f8740bdd7838d00ccf0b4522db8d2e948fbaaf1b729b882bacdd98df156ddd31d59f424b5e05fadf1a8e307f25c6a25fab9e2a53dce134210f6e231ae694d7eb2d42c0416871ffc3ee11a0ad137de82183efd38f277e1ade53020ce201a20eefb1fad338b429b247d989d122c9064c1399054aaa2195db1c67a28f18df018e0a4d3f844e2d0a8d3bfe28225e1c8ff60b5426ea87fb8d5d3d08c2b7946219453a720eb738472eee3def364dcdbdebbe04631b73b3c62287a151c0efb5a9200b529345e092da13188da853e7c7aba4dab6537c3ef51a8f1b087aaf3f3d21d2e7a4d7d2cf7721c62abfdbac68250f2300e2bc937b29d409fe2739636f8da61ac3f5af6bb9688aee7c853dfde1280657a9216a31c2f2561a7d3c9a83c5da68309fd20f294f7cad45960184292a5f5612be6413685585ea2dbd2a876872fa1e620a4eb6380f37e0382f842c79a7104479475c83beefd9ccc2a70310422c4e0ad32564de2f360e54a9a96cdd170a37aa1d648f520d1c60c5e7c24090b7d37811a23c089f1ccf747f799f1e202b9a71cd3cb2dbe7e1d61c550b0a88251b353dcfb78b7d9d6f520d142d5edd4e9bf6662f0ef403689d11204adca590eee50d5d566d48d5d3bdf2d1c696e5e0737f96e64058e0f265343ae590427206f2ef0fbfe7aadfcb491507b4f1f9646869bff3d48b30aa0aa697d251b16cf58e83ecb4ed03c02a46ceb723e2d9752654909441fe876134426bb942220b1499f46519af437d84bd76e34f542d8423d1f0f62c965cd4e435d6af0ff7dd0b4bd729fbd8a0e888532609a7f18977fb84eaf9f592ab7846f5d2c8df81d2e9328b10d1b0d4190c6456913fd08f9b67119cce770e566407dc3968b41e8d4aa9aaddd5554975f620a5874e3a2f95597a65bfc6ddcfc037f83fb402e7a7ca70ac55b49baf8d44458105a528e01ea7233e8e54cef899c6c849bab8d90e6c70ff7a8c2f0cb1df5b7df8083dfea6fd3cd5c549fc247e1ac007d764a280e2db1e671467a1b34d83029776e7ce622e32ea8267ef1d7d702f154e2c4eddb534f2349d02424f366d2b215455edd16a1d195ecf1a80a0aae4c5d1ba72d8c1c58e61416ae904601678158049eb1f92b4c7874b4b1c3524a141484ce05ae7573a11f322446ebc9f2b4c9f3669b82ebc890ca97f8719a3360bb3d564feaf0c8835e39c231b5e"}) 13:30:46 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:30:46 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1d010400000001121007e234"], 0x7) [ 1551.661399] No source specified 13:30:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) [ 1551.684019] random: crng reseeded on system resumption 13:30:46 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x0, 0x0, "d80feb", 0x3, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) [ 1551.779020] random: crng reseeded on system resumption [ 1551.782983] No source specified [ 1551.787518] No source specified 13:30:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) fsync(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:30:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1551.933444] No source specified 13:30:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:30:56 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x0, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:30:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:56 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) 13:30:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:30:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1562.571387] No source specified 13:31:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:31:00 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) pwritev2(r2, &(0x7f0000001680)=[{&(0x7f0000000140)="fca78f18bf60e6acceaf6339f649d1d9c1b318cca7fc6292331bd5a5ef4629e2f755f8e0115a1fe88d8a7b2a5a06a496a238cf49a9c0e5ecbe465d40ca478ffd04001bb510f5240131964855ea68b82362c078b2b74a80b3e21541ab29db7e271f68caf4d2529d7aefe467a4faa1c699559b5e8e51e333805a468352aad49e12c635be932739a20ccb027c5088866deb89815bb3a7623265543e42779c4535793eace92b", 0xa4}, {&(0x7f0000000200)="09f8628457f24af0b1baefc8aec46e942f4a5f6e8a57e7507200431556f50c3b98f328c5d52e593d3864ddd7339509b1e8a5a0b08ee6e33b705553e7e1782e8bf8a8bbb37ccd1b0f3af504d320332ac7e2ac7e817698430e90195677b3a6a1ae7fcb2f354b7714f422a05209c46a4eeb9df707f65a276783e35fc95d773edfdc4c62bb3c6e77924843b6cb26777712446554c93f6a0a296a5314bdc76314f917d276b17fa137bf46a973b4", 0xab}, {&(0x7f00000002c0)="aee791a0db1f02e5b26fd7491c51632b9441e8a9b65f23e79c373e7026c2b828338a08fa20bf664de9a2768c64e0dade333e1aaddd8716dbafe488236b2a7aa2225222e9009362e6d73ccf948a65c5246676615fc51cee459c0285e0f48cdb6bcd891974201987d2009fd41159dccc614226f8e813bc83c9571c67fbfa49760c263f8783588f71a4fb376087a8203255de89ae0994aa2af3d139c274cda3bec0baae452366cc24dca616e76fabe0b6853840501c52929c1856b86fcb6595f1045647ac7db3d89109e53295aaa2a636e9c916350ba4beacbeb3611b688f419ddc0ffde7605db3df18a98300fad119731969ab04b928f1419ab92085df", 0xfc}, {&(0x7f0000000440)="d0ac3fa9e3bb48a4ec5963435102cc831fe35bb5410315154cb68c308a62e8f85f8d2774037f5b4e6a107e2e946906d413471b1792754a1a6df27f45af5cae8a9bc320fc61", 0x45}, {&(0x7f00000004c0)="5e6aade8883e203a70c62483b831557eca9efa9f900c3d1d10a4195977a07145c9c4c422edaae85e2e094879fddbc41328999af57070e72db094c3803f6c656658686ae39dba8e71b0ae330a8affa817f7", 0x51}, {&(0x7f0000000540)="e2e35cc8948844dded4c0b4670294b786e5ef9ef096cc4a7a8a7bebe6ecc58d1d73859a5241a688aaf8bdde98469c9b9b3e0bc8bfe40ef3ad4438906eb461e977381d53b3f9bb1bbd6bb33a58ffa23b76f4f71bacb6807a6a213da81fa27e37804cef14c9de14c58833a9e8a84a94a39dc56e230e77e2b0ad81906c0b8e17b04965bc737d10b8153bd375e3c7dcf99ebf9e8d926d73cda893040eed3e1b25435f9bae17de658ad70e1d2df5443d745930276bfc283b29696aee1ac5611a414209c", 0xc1}, {&(0x7f0000000640)="e95758c45fd8333a31397544bbe16f68b2518cc310d6c458e101033448", 0x1d}, {&(0x7f0000000680)="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", 0x1000}], 0x8, 0x1, 0x2, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x200, 0x41) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:31:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) [ 1565.691250] random: crng reseeded on system resumption [ 1567.636433] No source specified [ 1567.637394] No source specified [ 1574.587661] syz-fuzzer: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1574.589835] CPU: 0 UID: 0 PID: 252 Comm: syz-fuzzer Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1574.589868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1574.589882] Call Trace: [ 1574.589891] [ 1574.589900] dump_stack_lvl+0xfa/0x120 [ 1574.589936] warn_alloc+0x211/0x360 [ 1574.589964] ? __pfx_warn_alloc+0x10/0x10 [ 1574.590011] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1574.590040] ? __kernel_text_address+0xd/0x40 [ 1574.590071] ? unwind_get_return_address+0x59/0xa0 [ 1574.590120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1574.590156] ? stack_depot_save_flags+0x2c/0xa20 [ 1574.590189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1574.590226] ? policy_nodemask+0xeb/0x4e0 [ 1574.590256] alloc_pages_mpol+0xed/0x340 [ 1574.590283] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1574.590307] ? lock_is_held_type+0x9e/0x120 [ 1574.590343] new_slab+0x257/0x330 [ 1574.590368] ___slab_alloc+0x9f4/0x11f0 [ 1574.590392] ? __alloc_skb+0x2ab/0x370 [ 1574.590435] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1574.590459] __slab_alloc.constprop.0+0x2c/0x60 [ 1574.590483] kmem_cache_alloc_node_noprof+0x455/0x6a0 [ 1574.590513] ? __alloc_skb+0x2ab/0x370 [ 1574.590544] ? __alloc_skb+0x2ab/0x370 [ 1574.590567] __alloc_skb+0x2ab/0x370 [ 1574.590592] ? __pfx___alloc_skb+0x10/0x10 [ 1574.590622] ? lock_acquire+0x15e/0x2f0 [ 1574.590658] ? __ieee80211_beacon_get+0x3e/0x16e0 [ 1574.590697] __netdev_alloc_skb+0x1eb/0x7c0 [ 1574.590729] __ieee80211_beacon_get+0x3a6/0x16e0 [ 1574.590766] ? kmem_cache_free+0x2a4/0x540 [ 1574.590795] ? skb_release_data+0x6a2/0xa40 [ 1574.590826] ieee80211_beacon_get_tim+0xa5/0x280 [ 1574.590862] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1574.590901] ? lock_is_held_type+0x9e/0x120 [ 1574.590931] mac80211_hwsim_beacon_tx+0x49e/0x940 [ 1574.590977] __iterate_interfaces+0x2e0/0x650 [ 1574.591009] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1574.591046] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1574.591080] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1574.591117] mac80211_hwsim_beacon+0x105/0x1b0 [ 1574.591140] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1574.591168] __hrtimer_run_queues+0x1ee/0xac0 [ 1574.591232] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1574.591271] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 1574.591316] hrtimer_run_softirq+0x14c/0x310 [ 1574.591343] handle_softirqs+0x1b1/0x770 [ 1574.591390] __irq_exit_rcu+0xc4/0x100 [ 1574.591428] irq_exit_rcu+0x9/0x20 [ 1574.591448] sysvec_apic_timer_interrupt+0x70/0x80 [ 1574.591473] [ 1574.591480] [ 1574.591490] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1574.591517] RIP: 0010:__rcu_read_lock+0x2a/0xf0 [ 1574.591552] Code: f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 65 48 8b 1d 40 19 4b 06 48 8d bb fc 03 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a6 00 00 00 65 [ 1574.591577] RSP: 0018:ffff88800a5ff368 EFLAGS: 00000213 [ 1574.591599] RAX: dffffc0000000000 RBX: ffff88800f699b80 RCX: ffffffff81939dd8 [ 1574.591617] RDX: 0000000000000000 RSI: ffff88800a198000 RDI: ffff88800f699f7c [ 1574.591633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1574.591648] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000000 [ 1574.591663] R13: ffff88800a5ff640 R14: ffff88800a5ff4b0 R15: dffffc0000000000 [ 1574.591688] ? shrink_node+0xb58/0x26a0 [ 1574.591723] mem_cgroup_iter+0x32/0x660 [ 1574.591747] ? page_counter_calculate_protection+0x40b/0x6e0 [ 1574.591778] ? vmpressure+0x6a/0x380 [ 1574.591813] shrink_node+0x78a/0x26a0 [ 1574.591857] ? __pfx_shrink_node+0x10/0x10 [ 1574.591884] ? vmpressure+0x2f2/0x380 [ 1574.591922] do_try_to_free_pages+0x312/0x1770 [ 1574.591971] try_to_free_pages+0x28c/0x600 [ 1574.592000] ? __pfx_try_to_free_pages+0x10/0x10 [ 1574.592040] ? find_held_lock+0x2b/0x80 [ 1574.592078] ? fs_reclaim_acquire+0xae/0x150 [ 1574.592110] ? lock_release+0xc8/0x290 [ 1574.592143] __alloc_frozen_pages_noprof+0x8cd/0x1f20 [ 1574.592172] ? lock_is_held_type+0x9e/0x120 [ 1574.592203] ? find_held_lock+0x2b/0x80 [ 1574.592243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1574.592268] ? lock_release+0xc8/0x290 [ 1574.592306] ? __lock_acquire+0xc65/0x1b70 [ 1574.592339] ? __lock_acquire+0x694/0x1b70 [ 1574.592366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1574.592401] ? policy_nodemask+0xeb/0x4e0 [ 1574.592431] alloc_pages_mpol+0xed/0x340 [ 1574.592457] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1574.592485] ? find_held_lock+0x2b/0x80 [ 1574.592523] ? xa_load+0x148/0x2c0 [ 1574.592559] folio_alloc_noprof+0x22/0x290 [ 1574.592593] filemap_alloc_folio_noprof+0x376/0x420 [ 1574.592630] ? __pfx_xa_load+0x10/0x10 [ 1574.592662] ? down_read+0x1b1/0x470 [ 1574.592692] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1574.592732] ? css_rstat_updated+0x1b8/0x4d0 [ 1574.592773] page_cache_ra_unbounded+0x2b6/0x870 [ 1574.592824] page_cache_ra_order+0x41f/0x510 [ 1574.592867] filemap_fault+0x1831/0x2ca0 [ 1574.592903] ? __pfx_filemap_fault+0x10/0x10 [ 1574.592946] ? __pfx_filemap_map_pages+0x10/0x10 [ 1574.592968] __do_fault+0x10d/0x480 [ 1574.593004] ? __pfx_filemap_map_pages+0x10/0x10 [ 1574.593026] __handle_mm_fault+0x100e/0x3270 [ 1574.593053] ? lock_vma_under_rcu+0x117/0x530 [ 1574.593087] ? __pfx___handle_mm_fault+0x10/0x10 [ 1574.593114] ? lock_vma_under_rcu+0x174/0x530 [ 1574.593167] handle_mm_fault+0x2c3/0x9b0 [ 1574.593192] ? access_error+0x17d/0x380 [ 1574.593225] do_user_addr_fault+0x501/0x12b0 [ 1574.593264] exc_page_fault+0xb0/0x180 [ 1574.593290] asm_exc_page_fault+0x26/0x30 [ 1574.593313] RIP: 0033:0x5cde47 [ 1574.593330] Code: 0f 86 93 00 00 00 48 83 ec 18 48 89 6c 24 10 48 8d 6c 24 10 48 8b 54 24 20 48 8b 5a 08 48 83 7a 10 08 7c 5c 90 48 8b 74 24 28 <48> 89 33 48 8b 5a 18 48 8b 4a 10 48 8b 72 08 48 83 f9 08 72 4f 48 [ 1574.593354] RSP: 002b:000000c0003d68d8 EFLAGS: 00010202 [ 1574.593372] RAX: 000000c0003d7140 RBX: 00007fe3b2b1e018 RCX: 000000c000001c80 [ 1574.593388] RDX: 000000c0003d7140 RSI: fffffffffffffffe RDI: 000000000090e620 [ 1574.593404] RBP: 000000c0003d68e8 R08: 003066ec77900301 R09: 00007fe3df573000 [ 1574.593420] R10: 00007fe3df573010 R11: 000000000029daf6 R12: 00000000000000f1 [ 1574.593435] R13: 0000000000000000 R14: 0000000000e5dacd R15: 0000000000000000 [ 1574.593467] [ 1574.678663] Mem-Info: [ 1574.679105] active_anon:2596 inactive_anon:246214 isolated_anon:0 [ 1574.679105] active_file:1580 inactive_file:13696 isolated_file:0 [ 1574.679105] unevictable:0 dirty:0 writeback:0 [ 1574.679105] slab_reclaimable:4123 slab_unreclaimable:55392 [ 1574.679105] mapped:70086 shmem:108 pagetables:6738 [ 1574.679105] sec_pagetables:0 bounce:0 [ 1574.679105] kernel_misc_reclaimable:0 [ 1574.679105] free:2966 free_pcp:161 free_cma:0 [ 1574.685280] Node 0 active_anon:10384kB inactive_anon:984856kB active_file:6320kB inactive_file:54672kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:280344kB dirty:0kB writeback:0kB shmem:432kB kernel_stack:9280kB pagetables:26952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1574.689627] Node 0 DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8236kB active_file:4kB inactive_file:100kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1574.694428] lowmem_reserve[]: 0 1600 1600 1600 [ 1574.695272] Node 0 DMA32 free:5652kB boost:12480kB min:17552kB low:19176kB high:20800kB reserved_highatomic:6144KB free_highatomic:16KB active_anon:10384kB inactive_anon:976620kB active_file:6316kB inactive_file:54172kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:704kB local_pcp:0kB free_cma:0kB [ 1574.700254] lowmem_reserve[]: 0 0 0 0 [ 1574.701099] Node 0 DMA: 11*4kB (M) 5*8kB (UM) 8*16kB (UME) 6*32kB (UME) 4*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6420kB [ 1574.704153] Node 0 DMA32: 79*4kB (UME) 166*8kB (UME) 99*16kB (UMEH) 6*32kB (M) 15*64kB (ME) 8*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5660kB [ 1574.706671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1574.708102] 15239 total pagecache pages [ 1574.708787] 0 pages in swap cache [ 1574.709356] Free swap = 0kB [ 1574.709887] Total swap = 0kB [ 1574.710397] 524158 pages RAM [ 1574.710919] 0 pages HighMem/MovableOnly [ 1574.711573] 110572 pages reserved [ 1574.712228] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1574.713729] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1574.715335] node 0: slabs: 327, objs: 3924, free: 0 [ 1576.839588] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1576.839749] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1576.840724] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1576.841438] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1576.842160] node 0: slabs: 581, objs: 6846, free: 0 [ 1576.842898] node 0: slabs: 355, objs: 4260, free: 0 [ 1576.843726] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1576.844416] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1576.845178] node 0: slabs: 355, objs: 4260, free: 0 [ 1576.845585] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1576.845669] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1576.846296] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1576.847059] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1576.847801] node 0: slabs: 355, objs: 4260, free: 0 [ 1576.848505] node 0: slabs: 581, objs: 6846, free: 0 [ 1576.848923] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1576.849351] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1576.849995] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1576.850761] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1576.851505] node 0: slabs: 355, objs: 4260, free: 0 [ 1576.852212] node 0: slabs: 581, objs: 6846, free: 0 [ 1576.852610] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1576.853700] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1576.854440] node 0: slabs: 355, objs: 4260, free: 0 [ 1576.854984] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1576.856039] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1576.856765] node 0: slabs: 581, objs: 6846, free: 0 [ 1635.413343] warn_alloc: 27 callbacks suppressed [ 1635.413361] ksoftirqd/0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1635.414860] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1635.414878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.414887] Call Trace: [ 1635.414893] [ 1635.414898] dump_stack_lvl+0xfa/0x120 [ 1635.414921] warn_alloc+0x211/0x360 [ 1635.414938] ? __pfx_warn_alloc+0x10/0x10 [ 1635.414963] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1635.414980] ? __lock_acquire+0x694/0x1b70 [ 1635.415000] ? __lock_acquire+0x694/0x1b70 [ 1635.415017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1635.415032] ? lock_acquire+0x15e/0x2f0 [ 1635.415047] ? unwind_next_frame+0xb9/0x2540 [ 1635.415072] ? lock_acquire+0x15e/0x2f0 [ 1635.415087] ? unwind_next_frame+0xb9/0x2540 [ 1635.415110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1635.415131] ? policy_nodemask+0xeb/0x4e0 [ 1635.415148] alloc_pages_mpol+0xed/0x340 [ 1635.415162] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1635.415176] ? lock_is_held_type+0x9e/0x120 [ 1635.415196] new_slab+0x257/0x330 [ 1635.415210] ___slab_alloc+0x9f4/0x11f0 [ 1635.415224] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1635.415244] ? kasan_save_stack+0x34/0x50 [ 1635.415267] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1635.415280] __slab_alloc.constprop.0+0x2c/0x60 [ 1635.415293] __kmalloc_noprof+0x51c/0x760 [ 1635.415307] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1635.415324] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1635.415337] ieee802_11_parse_elems_full+0x187/0x3190 [ 1635.415358] ? find_held_lock+0x2b/0x80 [ 1635.415379] ? paint_ptr+0x36/0x90 [ 1635.415394] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1635.415408] ? do_raw_spin_unlock+0x53/0x220 [ 1635.415431] ? mark_held_locks+0x49/0x80 [ 1635.415448] ? __asan_memcpy+0x3d/0x60 [ 1635.415469] ieee80211_inform_bss+0xf3/0x10b0 [ 1635.415494] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1635.415519] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1635.415540] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1635.415562] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1635.415583] ? lock_release+0xc8/0x290 [ 1635.415598] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1635.415615] ? do_raw_spin_unlock+0x53/0x220 [ 1635.415649] ? lock_release+0xc8/0x290 [ 1635.415670] cfg80211_inform_bss_data+0x215/0x34f0 [ 1635.415689] ? ieee80211_rx_handlers+0xccc/0x9620 [ 1635.415714] ? ieee80211_rx_handlers+0xccc/0x9620 [ 1635.415735] ? __local_bh_enable_ip+0xa1/0x110 [ 1635.415749] ? ieee80211_rx_handlers+0xccc/0x9620 [ 1635.415772] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1635.415792] ? __lock_acquire+0x694/0x1b70 [ 1635.415812] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1635.415845] ? lock_acquire+0x15e/0x2f0 [ 1635.415865] ? unwind_next_frame+0xb9/0x2540 [ 1635.415901] ? __lock_acquire+0x694/0x1b70 [ 1635.415919] ? lock_is_held_type+0x42/0x120 [ 1635.415940] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1635.415963] ieee80211_bss_info_update+0x2f5/0xa90 [ 1635.415986] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1635.416013] ? find_held_lock+0x2b/0x80 [ 1635.416033] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 1635.416051] ieee80211_scan_rx+0x4d6/0xb20 [ 1635.416071] ? ieee80211_clean_skb+0x18f/0x6f0 [ 1635.416095] ieee80211_rx_list+0x1e1a/0x29a0 [ 1635.416115] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1635.416128] ? __lock_acquire+0xc65/0x1b70 [ 1635.416150] ? do_raw_spin_lock+0x123/0x260 [ 1635.416171] ieee80211_rx_napi+0xdb/0x3c0 [ 1635.416184] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1635.416199] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1635.416224] ieee80211_handle_queued_frames+0xd9/0x130 [ 1635.416248] tasklet_action_common+0x235/0x3b0 [ 1635.416262] ? workqueue_softirq_action+0x1a/0x170 [ 1635.416285] handle_softirqs+0x1b1/0x770 [ 1635.416309] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1635.416330] ? smpboot_thread_fn+0x371/0x9d0 [ 1635.416352] run_ksoftirqd+0x2e/0x60 [ 1635.416372] smpboot_thread_fn+0x41d/0x9d0 [ 1635.416394] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1635.416418] kthread+0x3c8/0x740 [ 1635.416433] ? __pfx_kthread+0x10/0x10 [ 1635.416446] ? ret_from_fork+0x23/0x470 [ 1635.416469] ? lock_release+0xc8/0x290 [ 1635.416485] ? __pfx_kthread+0x10/0x10 [ 1635.416500] ret_from_fork+0x38b/0x470 [ 1635.416521] ? __pfx_kthread+0x10/0x10 [ 1635.416535] ret_from_fork_asm+0x1a/0x30 [ 1635.416562] [ 1635.448077] Mem-Info: [ 1635.448285] active_anon:2596 inactive_anon:246825 isolated_anon:0 [ 1635.448285] active_file:2320 inactive_file:11186 isolated_file:64 [ 1635.448285] unevictable:0 dirty:1 writeback:0 [ 1635.448285] slab_reclaimable:4066 slab_unreclaimable:56797 [ 1635.448285] mapped:70065 shmem:108 pagetables:6708 [ 1635.448285] sec_pagetables:0 bounce:0 [ 1635.448285] kernel_misc_reclaimable:0 [ 1635.448285] free:1968 free_pcp:936 free_cma:0 [ 1635.451258] Node 0 active_anon:10384kB inactive_anon:987300kB active_file:9280kB inactive_file:44828kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:280260kB dirty:4kB writeback:0kB shmem:432kB kernel_stack:9216kB pagetables:26832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1635.453465] Node 0 DMA free:6416kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8232kB active_file:4kB inactive_file:80kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1635.455859] lowmem_reserve[]: 0 1600 1600 1600 [ 1635.456285] Node 0 DMA32 free:1456kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10384kB inactive_anon:979068kB active_file:9276kB inactive_file:44748kB unevictable:0kB writepending:4kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3740kB local_pcp:2236kB free_cma:0kB [ 1635.458892] lowmem_reserve[]: 0 0 0 0 [ 1635.459246] Node 0 DMA: 15*4kB (M) 6*8kB (UM) 8*16kB (UME) 5*32kB (UME) 4*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6412kB [ 1635.460642] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 10*64kB (M) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1420kB [ 1635.461774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1635.462488] 13644 total pagecache pages [ 1635.462801] 0 pages in swap cache [ 1635.463102] Free swap = 0kB [ 1635.463340] Total swap = 0kB [ 1635.463594] 524158 pages RAM [ 1635.463900] 0 pages HighMem/MovableOnly [ 1635.464245] 110572 pages reserved [ 1635.464513] slab_out_of_memory: 18 callbacks suppressed [ 1635.464520] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1635.465823] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1635.466608] node 0: slabs: 866, objs: 7066, free: 0 [ 1642.990967] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1642.991798] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1642.992539] node 0: slabs: 663, objs: 6758, free: 0 [ 1642.993019] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1642.993811] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1642.994538] node 0: slabs: 663, objs: 6758, free: 0 [ 1642.994999] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1642.995791] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1642.996518] node 0: slabs: 663, objs: 6758, free: 0 [ 1642.996981] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1642.997771] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1642.998480] node 0: slabs: 663, objs: 6758, free: 0 [ 1642.998941] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1642.999729] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1643.000456] node 0: slabs: 663, objs: 6758, free: 0 [ 1643.000922] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1643.001711] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1643.002421] node 0: slabs: 663, objs: 6758, free: 0 [ 1643.002866] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1643.003659] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1643.004394] node 0: slabs: 663, objs: 6758, free: 0 [ 1643.004860] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1643.005647] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1643.006356] node 0: slabs: 663, objs: 6758, free: 0 [ 1643.006852] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1643.007669] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1643.008412] node 0: slabs: 663, objs: 6758, free: 0 [ 1643.008867] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1643.009662] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1643.010372] node 0: slabs: 663, objs: 6758, free: 0 [ 1658.760158] warn_alloc: 10 callbacks suppressed [ 1658.760179] ksoftirqd/0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1658.761504] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1658.761521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.761529] Call Trace: [ 1658.761534] [ 1658.761539] dump_stack_lvl+0xfa/0x120 [ 1658.761561] warn_alloc+0x211/0x360 [ 1658.761578] ? __pfx_warn_alloc+0x10/0x10 [ 1658.761603] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1658.761618] ? __lock_acquire+0x694/0x1b70 [ 1658.761642] ? __lock_acquire+0x694/0x1b70 [ 1658.761657] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1658.761671] ? lock_acquire+0x15e/0x2f0 [ 1658.761685] ? unwind_next_frame+0xb9/0x2540 [ 1658.761708] ? lock_acquire+0x15e/0x2f0 [ 1658.761722] ? unwind_next_frame+0xb9/0x2540 [ 1658.761744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1658.761764] ? policy_nodemask+0xeb/0x4e0 [ 1658.761780] alloc_pages_mpol+0xed/0x340 [ 1658.761793] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1658.761806] ? lock_is_held_type+0x9e/0x120 [ 1658.761825] new_slab+0x257/0x330 [ 1658.761839] ___slab_alloc+0x9f4/0x11f0 [ 1658.761851] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1658.761871] ? kasan_save_stack+0x34/0x50 [ 1658.761892] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1658.761904] __slab_alloc.constprop.0+0x2c/0x60 [ 1658.761916] __kmalloc_noprof+0x51c/0x760 [ 1658.761929] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1658.761945] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1658.761957] ieee802_11_parse_elems_full+0x187/0x3190 [ 1658.761977] ? find_held_lock+0x2b/0x80 [ 1658.761996] ? paint_ptr+0x36/0x90 [ 1658.762010] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1658.762024] ? do_raw_spin_unlock+0x53/0x220 [ 1658.762045] ? mark_held_locks+0x49/0x80 [ 1658.762061] ? __asan_memcpy+0x3d/0x60 [ 1658.762081] ieee80211_inform_bss+0xf3/0x10b0 [ 1658.762104] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1658.762127] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1658.762146] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1658.762167] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1658.762186] ? lock_release+0xc8/0x290 [ 1658.762201] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1658.762229] ? ret_from_fork_asm+0x1a/0x30 [ 1658.762252] cfg80211_inform_bss_data+0x215/0x34f0 [ 1658.762271] ? kasan_save_stack+0x34/0x50 [ 1658.762288] ? kasan_save_stack+0x24/0x50 [ 1658.762306] ? kasan_save_track+0x14/0x30 [ 1658.762323] ? __kasan_save_free_info+0x3a/0x60 [ 1658.762338] ? __kasan_slab_free+0x43/0x70 [ 1658.762357] ? kmem_cache_free+0x2a4/0x540 [ 1658.762371] ? __alloc_skb+0x320/0x370 [ 1658.762385] ? __netdev_alloc_skb+0x1eb/0x7c0 [ 1658.762398] ? __ieee80211_beacon_get+0x3a6/0x16e0 [ 1658.762414] ? ieee80211_beacon_get_tim+0xa5/0x280 [ 1658.762430] ? mac80211_hwsim_beacon_tx+0x49e/0x940 [ 1658.762447] ? __iterate_interfaces+0x2e0/0x650 [ 1658.762462] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1658.762478] ? mac80211_hwsim_beacon+0x105/0x1b0 [ 1658.762491] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1658.762506] ? run_ksoftirqd+0x2e/0x60 [ 1658.762525] ? smpboot_thread_fn+0x41d/0x9d0 [ 1658.762546] ? kthread+0x3c8/0x740 [ 1658.762558] ? ret_from_fork+0x38b/0x470 [ 1658.762578] ? ret_from_fork_asm+0x1a/0x30 [ 1658.762599] ? lock_acquire+0x15e/0x2f0 [ 1658.762613] ? __virt_addr_valid+0x1c6/0x5d0 [ 1658.762634] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1658.762650] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1658.762663] ? lock_release+0xc8/0x290 [ 1658.762684] ? __lock_acquire+0x694/0x1b70 [ 1658.762702] ? __alloc_skb+0x320/0x370 [ 1658.762719] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1658.762740] ieee80211_bss_info_update+0x2f5/0xa90 [ 1658.762761] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1658.762781] ? __lock_acquire+0xc65/0x1b70 [ 1658.762800] ? find_held_lock+0x2b/0x80 [ 1658.762818] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 1658.762835] ieee80211_scan_rx+0x4d6/0xb20 [ 1658.762854] ? ieee80211_clean_skb+0x18f/0x6f0 [ 1658.762876] ieee80211_rx_list+0x1e1a/0x29a0 [ 1658.762895] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1658.762907] ? __lock_acquire+0xc65/0x1b70 [ 1658.762928] ? do_raw_spin_lock+0x123/0x260 [ 1658.762948] ieee80211_rx_napi+0xdb/0x3c0 [ 1658.762960] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1658.762973] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1658.762997] ieee80211_handle_queued_frames+0xd9/0x130 [ 1658.763019] tasklet_action_common+0x235/0x3b0 [ 1658.763032] ? workqueue_softirq_action+0x1a/0x170 [ 1658.763053] handle_softirqs+0x1b1/0x770 [ 1658.763075] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1658.763094] ? smpboot_thread_fn+0x371/0x9d0 [ 1658.763113] run_ksoftirqd+0x2e/0x60 [ 1658.763132] smpboot_thread_fn+0x41d/0x9d0 [ 1658.763152] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1658.763173] kthread+0x3c8/0x740 [ 1658.763186] ? __pfx_kthread+0x10/0x10 [ 1658.763199] ? ret_from_fork+0x23/0x470 [ 1658.763218] ? lock_release+0xc8/0x290 [ 1658.763235] ? __pfx_kthread+0x10/0x10 [ 1658.763251] ret_from_fork+0x38b/0x470 [ 1658.763271] ? __pfx_kthread+0x10/0x10 [ 1658.763285] ret_from_fork_asm+0x1a/0x30 [ 1658.763309] [ 1658.797489] Mem-Info: [ 1658.797693] active_anon:2597 inactive_anon:246912 isolated_anon:0 [ 1658.797693] active_file:2046 inactive_file:11177 isolated_file:0 [ 1658.797693] unevictable:0 dirty:2 writeback:0 [ 1658.797693] slab_reclaimable:4063 slab_unreclaimable:56979 [ 1658.797693] mapped:70066 shmem:108 pagetables:6719 [ 1658.797693] sec_pagetables:0 bounce:0 [ 1658.797693] kernel_misc_reclaimable:0 [ 1658.797693] free:1912 free_pcp:1016 free_cma:0 [ 1658.800465] Node 0 active_anon:10388kB inactive_anon:987648kB active_file:8184kB inactive_file:44708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:280264kB dirty:8kB writeback:0kB shmem:432kB kernel_stack:9184kB pagetables:26876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1658.802339] Node 0 DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8232kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1658.804400] lowmem_reserve[]: 0 1600 1600 1600 [ 1658.804776] Node 0 DMA32 free:1228kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:6144KB free_highatomic:16KB active_anon:10388kB inactive_anon:979416kB active_file:8180kB inactive_file:44636kB unevictable:0kB writepending:8kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:4064kB local_pcp:972kB free_cma:0kB [ 1658.807023] lowmem_reserve[]: 0 0 0 0 [ 1658.807326] Node 0 DMA: 18*4kB (UM) 8*8kB (UM) 7*16kB (ME) 5*32kB (UME) 4*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6424kB [ 1658.808539] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 59*16kB (MH) 1*32kB (M) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1116kB [ 1658.809554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.810186] 13384 total pagecache pages [ 1658.810478] 0 pages in swap cache [ 1658.810754] Free swap = 0kB [ 1658.810983] Total swap = 0kB [ 1658.811210] 524158 pages RAM [ 1658.811439] 0 pages HighMem/MovableOnly [ 1658.811752] 110572 pages reserved [ 1658.812011] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.812763] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.813429] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.813878] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.814602] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.815285] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.815724] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.816460] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.817142] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.817565] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.818303] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.818982] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.819404] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.820153] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.820836] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.821259] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.821998] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.822676] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.823098] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.823836] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.824519] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.824956] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.825694] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.826358] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.826794] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1658.827518] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1658.828217] node 0: slabs: 816, objs: 7960, free: 0 [ 1658.828614] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1658.829286] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1658.829994] node 0: slabs: 417, objs: 5004, free: 0 13:32:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:32:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:32:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x1a003, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000, 0x0, 0x0, 0x2000000, 0x0, 0xffff}, 0x0, 0x6, 0xffffffffffffffff, 0x8) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:32:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:32:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) [ 1683.923538] No source specified 13:32:59 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x0, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:33:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1692.419820] random: crng reseeded on system resumption 13:33:05 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x8, 0xc8, @none, 0x1, 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc6}, "c6dd47fb4b28f4c26e55a24a6200a39d9f308834ec1ef1d85b59d1efbcad94b2b1110c2e871bd45d31b17cd475b708f6f88c6e8f41a341735b8794f1c0717acbdc42f0a5f550881ccea9311254baff361f1878bb84c4f76cffe08e29dc3421e9d4dcf3cb85d3891dfa618faa50a83e6fbeb83d4f1f05ace5fbc2090a6e33f9ddb1d85c74f5cb2d44f5b26fa14860b7e9a7b3b0ba4471efd7e8a9e0f1ad8f3ac07bd5c02a1224276de82853801500bdb9c2da11a3b3eb5bee111a43c832d8074cbf054043ebad"}, 0xca) 13:33:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:33:10 executing program 2: unshare(0xb0c00) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000440)={{r0}, "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"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) pread64(r1, &(0x7f0000000080)=""/107, 0x6b, 0x20) 13:33:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) [ 1697.625096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1697.625798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1697.626504] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1699.496700] Bluetooth: hci0: command 0x0406 tx timeout [ 1699.687710] Bluetooth: hci5: command 0x0406 tx timeout [ 1699.688416] Bluetooth: hci3: command 0x0406 tx timeout [ 1717.742598] warn_alloc: 27 callbacks suppressed [ 1717.742619] syz-fuzzer: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1717.742726] slab_out_of_memory: 18 callbacks suppressed [ 1717.742745] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1717.743940] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1717.744361] ,cpuset= [ 1717.745209] node 0: slabs: 781, objs: 7512, free: 0 [ 1717.746857] /,mems_allowed=0 [ 1717.747138] CPU: 0 UID: 0 PID: 253 Comm: syz-fuzzer Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1717.747154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.747163] Call Trace: [ 1717.747168] [ 1717.747173] dump_stack_lvl+0xfa/0x120 [ 1717.747194] warn_alloc+0x211/0x360 [ 1717.747210] ? __pfx_warn_alloc+0x10/0x10 [ 1717.747234] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1717.747255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1717.747270] ? lock_acquire+0x15e/0x2f0 [ 1717.747288] ? __is_insn_slot_addr+0x136/0x290 [ 1717.747301] ? lock_release+0xc8/0x290 [ 1717.747317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1717.747335] ? policy_nodemask+0xeb/0x4e0 [ 1717.747351] alloc_pages_mpol+0xed/0x340 [ 1717.747364] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1717.747376] ? lock_is_held_type+0x9e/0x120 [ 1717.747395] new_slab+0x257/0x330 [ 1717.747408] ___slab_alloc+0x9f4/0x11f0 [ 1717.747420] ? __alloc_skb+0x2ab/0x370 [ 1717.747439] ? kasan_save_stack+0x34/0x50 [ 1717.747459] ? kasan_save_stack+0x24/0x50 [ 1717.747476] ? kasan_save_track+0x14/0x30 [ 1717.747494] ? __kasan_save_free_info+0x3a/0x60 [ 1717.747509] ? __kasan_slab_free+0x43/0x70 [ 1717.747527] ? kmem_cache_free+0x2a4/0x540 [ 1717.747541] ? kfree_skbmem+0x18a/0x1f0 [ 1717.747559] ? consume_skb+0xdd/0x160 [ 1717.747574] ? mac80211_hwsim_tx_frame+0x1f6/0x2a0 [ 1717.747594] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1717.747606] __slab_alloc.constprop.0+0x2c/0x60 [ 1717.747618] kmem_cache_alloc_node_noprof+0x455/0x6a0 [ 1717.747635] ? lru_note_cost_unlock_irq+0x122/0x390 [ 1717.747650] ? __alloc_skb+0x2ab/0x370 [ 1717.747666] ? __alloc_skb+0x2ab/0x370 [ 1717.747672] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1717.747677] __alloc_skb+0x2ab/0x370 [ 1717.747691] ? __pfx___alloc_skb+0x10/0x10 [ 1717.747707] ? lock_acquire+0x15e/0x2f0 [ 1717.747721] ? __ieee80211_beacon_get+0x3e/0x16e0 [ 1717.747741] __netdev_alloc_skb+0x1eb/0x7c0 [ 1717.747757] __ieee80211_beacon_get+0x3a6/0x16e0 [ 1717.747775] ? kmem_cache_free+0x2a4/0x540 [ 1717.747789] ? skb_release_data+0x6a2/0xa40 [ 1717.747805] ieee80211_beacon_get_tim+0xa5/0x280 [ 1717.747822] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1717.747841] ? lock_is_held_type+0x9e/0x120 [ 1717.747856] mac80211_hwsim_beacon_tx+0x49e/0x940 [ 1717.747878] __iterate_interfaces+0x2e0/0x650 [ 1717.747894] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1717.747913] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1717.747929] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1717.747948] mac80211_hwsim_beacon+0x105/0x1b0 [ 1717.747960] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1717.747973] __hrtimer_run_queues+0x1ee/0xac0 [ 1717.748000] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1717.748020] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 1717.748042] hrtimer_run_softirq+0x14c/0x310 [ 1717.748056] handle_softirqs+0x1b1/0x770 [ 1717.748080] __irq_exit_rcu+0xc4/0x100 [ 1717.748098] irq_exit_rcu+0x9/0x20 [ 1717.748109] sysvec_apic_timer_interrupt+0x70/0x80 [ 1717.748121] [ 1717.748125] [ 1717.748129] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1717.748145] RIP: 0010:_raw_spin_unlock_irq+0x2b/0x40 [ 1717.748166] Code: 0f 1e fa 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 ea 48 90 fc 48 89 ef e8 22 94 90 fc e8 5d a8 ba fc fb 65 ff 0d 75 83 e4 02 <74> 06 5d e9 7d 23 00 00 0f 1f 44 00 00 5d e9 72 23 00 00 66 90 90 [ 1717.748179] RSP: 0018:ffff888016597090 EFLAGS: 00000286 [ 1717.748189] RAX: 00000000002b05b9 RBX: ffff8880094bef40 RCX: 0000000000000080 [ 1717.748197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84c19cb3 [ 1717.748205] RBP: ffff8880094bef90 R08: 0000000000000001 R09: 0000000000000001 [ 1717.748213] R10: ffffffff86644e57 R11: 0000000000000001 R12: 0000000000000000 [ 1717.748220] R13: 0000000000001ada R14: ffff8880094bef90 R15: 0000000000000001 [ 1717.748234] ? _raw_spin_unlock_irq+0x23/0x40 [ 1717.748255] lru_note_cost_unlock_irq+0x154/0x390 [ 1717.748272] shrink_lruvec+0x1043/0x2730 [ 1717.748294] ? __pfx_shrink_lruvec+0x10/0x10 [ 1717.748308] ? lock_acquire+0x15e/0x2f0 [ 1717.748333] ? lock_acquire+0x15e/0x2f0 [ 1717.748347] ? percpu_ref_put_many.constprop.0+0x1b/0x1b0 [ 1717.748370] ? lock_release+0xc8/0x290 [ 1717.748388] ? page_counter_calculate_protection+0x2f4/0x6e0 [ 1717.748407] shrink_node+0xa66/0x26a0 [ 1717.748429] ? __pfx_shrink_node+0x10/0x10 [ 1717.748442] ? vmpressure+0x2f2/0x380 [ 1717.748462] do_try_to_free_pages+0x312/0x1770 [ 1717.748486] try_to_free_pages+0x28c/0x600 [ 1717.748501] ? __pfx_try_to_free_pages+0x10/0x10 [ 1717.748521] ? find_held_lock+0x2b/0x80 [ 1717.748540] ? fs_reclaim_acquire+0xae/0x150 [ 1717.748557] ? lock_release+0xc8/0x290 [ 1717.748574] __alloc_frozen_pages_noprof+0x8cd/0x1f20 [ 1717.748593] ? __is_insn_slot_addr+0x136/0x290 [ 1717.748605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1717.748623] ? kernel_text_address+0x5b/0xc0 [ 1717.748639] ? __kernel_text_address+0xd/0x40 [ 1717.748656] ? __lock_acquire+0x694/0x1b70 [ 1717.748670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1717.748687] ? policy_nodemask+0xeb/0x4e0 [ 1717.748702] alloc_pages_mpol+0xed/0x340 [ 1717.748715] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1717.748729] ? find_held_lock+0x2b/0x80 [ 1717.748757] ? xa_load+0x148/0x2c0 [ 1717.748776] folio_alloc_noprof+0x22/0x290 [ 1717.748791] filemap_alloc_folio_noprof+0x376/0x420 [ 1717.748810] ? __pfx_xa_load+0x10/0x10 [ 1717.748826] ? down_read+0x1b1/0x470 [ 1717.748841] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1717.748861] ? css_rstat_updated+0x1b8/0x4d0 [ 1717.748881] page_cache_ra_unbounded+0x2b6/0x870 [ 1717.748907] page_cache_ra_order+0x41f/0x510 [ 1717.748928] filemap_fault+0x1831/0x2ca0 [ 1717.748947] ? __pfx_filemap_fault+0x10/0x10 [ 1717.748969] __do_fault+0x10d/0x480 [ 1717.748988] __handle_mm_fault+0x11c0/0x3270 [ 1717.749001] ? lock_vma_under_rcu+0x117/0x530 [ 1717.749018] ? __pfx___handle_mm_fault+0x10/0x10 [ 1717.749031] ? lock_vma_under_rcu+0x174/0x530 [ 1717.749059] handle_mm_fault+0x2c3/0x9b0 [ 1717.749071] ? access_error+0x17d/0x380 [ 1717.749089] do_user_addr_fault+0x501/0x12b0 [ 1717.749109] exc_page_fault+0xb0/0x180 [ 1717.749122] asm_exc_page_fault+0x26/0x30 [ 1717.749134] RIP: 0033:0x465f2d [ 1717.749150] Code: Unable to access opcode bytes at 0x465f03. [ 1717.749155] RSP: 002b:000000c00003ff18 EFLAGS: 00010212 [ 1717.749164] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 0000000000465f2d [ 1717.749172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003ff18 [ 1717.749179] RBP: 000000c00003ff28 R08: 0000000000022255 R09: 00007fe3df573000 [ 1717.749187] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000438880 [ 1717.749195] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 1717.749211] [ 1717.749236] Mem-Info: [ 1717.749447] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1717.749672] active_anon:2596 inactive_anon:247631 isolated_anon:0 [ 1717.749672] active_file:2225 inactive_file:9343 isolated_file:32 [ 1717.749672] unevictable:0 dirty:1 writeback:0 [ 1717.749672] slab_reclaimable:4066 slab_unreclaimable:57839 [ 1717.749672] mapped:70042 shmem:108 pagetables:6742 [ 1717.749672] sec_pagetables:0 bounce:0 [ 1717.749672] kernel_misc_reclaimable:0 [ 1717.749672] free:1983 free_pcp:934 free_cma:0 [ 1717.749975] node 0: slabs: 781, objs: 7512, free: 0 [ 1717.750286] Node 0 active_anon:10384kB inactive_anon:990524kB active_file:8900kB inactive_file:37372kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:280168kB dirty:4kB writeback:0kB shmem:432kB kernel_stack:9216kB pagetables:26968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1717.750694] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1717.751094] Node 0 [ 1717.751570] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1717.751919] DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8240kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1717.752313] node 0: slabs: 781, objs: 7512, free: 0 [ 1717.752651] lowmem_reserve[]: 0 1600 1600 1600 [ 1717.812094] Node 0 DMA32 free:1512kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:2048KB free_highatomic:48KB active_anon:10384kB inactive_anon:982284kB active_file:8400kB inactive_file:37788kB unevictable:0kB writepending:4kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3732kB local_pcp:2012kB free_cma:0kB [ 1717.814694] lowmem_reserve[]: 0 0 0 0 [ 1717.815033] Node 0 DMA: 14*4kB (UM) 9*8kB (UM) 9*16kB (UME) 4*32kB (UME) 4*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6416kB [ 1717.816432] Node 0 DMA32: 7*4kB (MH) 1*8kB (H) 90*16kB (MH) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1476kB [ 1717.817548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.818264] 11714 total pagecache pages [ 1717.818593] 0 pages in swap cache [ 1717.818885] Free swap = 0kB [ 1717.819147] Total swap = 0kB [ 1717.819389] 524158 pages RAM [ 1717.819659] 0 pages HighMem/MovableOnly [ 1717.819984] 110572 pages reserved [ 1717.820272] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1717.821025] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1717.821855] node 0: slabs: 391, objs: 4692, free: 0 [ 1723.579284] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1723.580039] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1723.580831] node 0: slabs: 384, objs: 4608, free: 0 [ 1730.747568] warn_alloc: 4 callbacks suppressed [ 1730.747594] kworker/u10:7: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1730.750190] CPU: 1 UID: 0 PID: 1274 Comm: kworker/u10:7 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1730.750219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1730.750233] Workqueue: events_unbound cfg80211_wiphy_work [ 1730.750271] Call Trace: [ 1730.750279] [ 1730.750287] dump_stack_lvl+0xfa/0x120 [ 1730.750316] warn_alloc+0x211/0x360 [ 1730.750341] ? __pfx_warn_alloc+0x10/0x10 [ 1730.750386] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1730.750421] ? __lock_acquire+0x694/0x1b70 [ 1730.750448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1730.750481] ? lock_acquire+0x15e/0x2f0 [ 1730.750506] ? unwind_next_frame+0xb9/0x2540 [ 1730.750544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1730.750576] ? policy_nodemask+0xeb/0x4e0 [ 1730.750603] alloc_pages_mpol+0xed/0x340 [ 1730.750633] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1730.750655] ? lock_is_held_type+0x9e/0x120 [ 1730.750687] new_slab+0x257/0x330 [ 1730.750710] ___slab_alloc+0x9f4/0x11f0 [ 1730.750732] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1730.750760] ? arch_stack_walk+0x86/0xf0 [ 1730.750793] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1730.750813] __slab_alloc.constprop.0+0x2c/0x60 [ 1730.750833] __kmalloc_noprof+0x51c/0x760 [ 1730.750853] ? register_lock_class+0x41/0x560 [ 1730.750881] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1730.750909] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1730.750930] ieee802_11_parse_elems_full+0x187/0x3190 [ 1730.750970] ? find_held_lock+0x2b/0x80 [ 1730.751002] ? paint_ptr+0x36/0x90 [ 1730.751026] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1730.751049] ? do_raw_spin_unlock+0x53/0x220 [ 1730.751086] ? mark_held_locks+0x49/0x80 [ 1730.751114] ? __asan_memcpy+0x3d/0x60 [ 1730.751148] ieee80211_inform_bss+0xf3/0x10b0 [ 1730.751187] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1730.751228] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1730.751259] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1730.751294] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1730.751327] ? unwind_next_frame+0x3bc/0x2540 [ 1730.751359] ? ret_from_fork_asm+0x1a/0x30 [ 1730.751389] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1730.751416] ? kernel_text_address+0x11/0xc0 [ 1730.751463] ? stack_trace_save+0x8e/0xc0 [ 1730.751492] ? stack_depot_save_flags+0x2c/0xa20 [ 1730.751523] cfg80211_inform_bss_data+0x215/0x34f0 [ 1730.751550] ? kasan_save_track+0x14/0x30 [ 1730.751581] ? __kasan_kmalloc+0x7f/0x90 [ 1730.751611] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1730.751633] ? ieee80211_iface_work+0xd52/0x1220 [ 1730.751652] ? cfg80211_wiphy_work+0x245/0x480 [ 1730.751681] ? worker_thread+0x67e/0xe90 [ 1730.751705] ? kthread+0x3c8/0x740 [ 1730.751726] ? ret_from_fork+0x38b/0x470 [ 1730.751758] ? ret_from_fork_asm+0x1a/0x30 [ 1730.751795] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1730.751827] ? __lock_acquire+0x694/0x1b70 [ 1730.751854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1730.751885] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 1730.751928] ? __lock_acquire+0x694/0x1b70 [ 1730.751970] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1730.752006] ieee80211_bss_info_update+0x2f5/0xa90 [ 1730.752043] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1730.752086] ? find_held_lock+0x2b/0x80 [ 1730.752118] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 1730.752153] ? lock_release+0xc8/0x290 [ 1730.752182] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 1730.752231] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1730.752267] ? __lock_acquire+0xc65/0x1b70 [ 1730.752315] ? mark_held_locks+0x49/0x80 [ 1730.752350] ieee80211_iface_work+0xd52/0x1220 [ 1730.752378] cfg80211_wiphy_work+0x245/0x480 [ 1730.752413] process_one_work+0x8e1/0x19c0 [ 1730.752450] ? __pfx_process_one_work+0x10/0x10 [ 1730.752476] ? move_linked_works+0x172/0x270 [ 1730.752513] ? assign_work+0x196/0x240 [ 1730.752542] worker_thread+0x67e/0xe90 [ 1730.752568] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1730.752601] ? __pfx_worker_thread+0x10/0x10 [ 1730.752629] kthread+0x3c8/0x740 [ 1730.752651] ? __pfx_kthread+0x10/0x10 [ 1730.752673] ? ret_from_fork+0x23/0x470 [ 1730.752706] ? lock_release+0xc8/0x290 [ 1730.752732] ? __pfx_kthread+0x10/0x10 [ 1730.752757] ret_from_fork+0x38b/0x470 [ 1730.752789] ? __pfx_kthread+0x10/0x10 [ 1730.752812] ret_from_fork_asm+0x1a/0x30 [ 1730.752855] [ 1730.809923] Mem-Info: [ 1730.810441] active_anon:2596 inactive_anon:247627 isolated_anon:0 [ 1730.810441] active_file:4358 inactive_file:8043 isolated_file:25 [ 1730.810441] unevictable:0 dirty:3 writeback:0 [ 1730.810441] slab_reclaimable:4066 slab_unreclaimable:56925 [ 1730.810441] mapped:70121 shmem:108 pagetables:6742 [ 1730.810441] sec_pagetables:0 bounce:0 [ 1730.810441] kernel_misc_reclaimable:0 [ 1730.810441] free:2967 free_pcp:37 free_cma:0 [ 1730.816065] Node 0 active_anon:10384kB inactive_anon:990508kB active_file:17432kB inactive_file:32172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:280484kB dirty:12kB writeback:0kB shmem:432kB kernel_stack:9216kB pagetables:26968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1730.819794] Node 0 DMA free:6452kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8240kB active_file:40kB inactive_file:72kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.824115] lowmem_reserve[]: 0 1600 1600 1600 [ 1730.824983] Node 0 DMA32 free:5416kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:6144KB free_highatomic:0KB active_anon:10384kB inactive_anon:982268kB active_file:17236kB inactive_file:31868kB unevictable:0kB writepending:12kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:568kB local_pcp:0kB free_cma:0kB [ 1730.829668] lowmem_reserve[]: 0 0 0 0 [ 1730.830279] Node 0 DMA: 5*4kB (UM) 8*8kB (UM) 10*16kB (UME) 6*32kB (UME) 4*64kB (UE) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6452kB [ 1730.832833] Node 0 DMA32: 161*4kB (U) 161*8kB (UM) 118*16kB (UM) 36*32kB (M) 4*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5356kB [ 1730.834978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.836212] 12254 total pagecache pages [ 1730.836817] 0 pages in swap cache [ 1730.837455] Free swap = 0kB [ 1730.838008] Total swap = 0kB [ 1730.838464] 524158 pages RAM [ 1730.838936] 0 pages HighMem/MovableOnly [ 1730.839513] 110572 pages reserved [ 1730.840037] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1730.841495] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1730.842836] node 0: slabs: 783, objs: 7362, free: 0 [ 1736.379001] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1736.379321] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1736.379833] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1736.379848] node 0: slabs: 1110, objs: 8464, free: 0 [ 1736.383671] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1736.385129] node 0: slabs: 1110, objs: 8464, free: 0 [ 1745.652912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1745.653541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1745.654141] Bluetooth: hci5: Opcode 0x0c1a failed: -4 13:34:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:34:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:34:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1747.496706] Bluetooth: hci0: command 0x0406 tx timeout [ 1747.688217] Bluetooth: hci5: command 0x0406 tx timeout [ 1747.689989] Bluetooth: hci3: command 0x0406 tx timeout [ 1755.380454] No source specified [ 1758.501342] warn_alloc: 2 callbacks suppressed [ 1758.501361] kworker/u9:5: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1758.503145] CPU: 0 UID: 0 PID: 14484 Comm: kworker/u9:5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1758.503164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.503174] Workqueue: events_unbound cfg80211_wiphy_work [ 1758.503202] Call Trace: [ 1758.503208] [ 1758.503214] dump_stack_lvl+0xfa/0x120 [ 1758.503235] warn_alloc+0x211/0x360 [ 1758.503252] ? __pfx_warn_alloc+0x10/0x10 [ 1758.503282] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1758.503306] ? __lock_acquire+0x694/0x1b70 [ 1758.503325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1758.503347] ? lock_acquire+0x15e/0x2f0 [ 1758.503364] ? unwind_next_frame+0xb9/0x2540 [ 1758.503391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1758.503413] ? policy_nodemask+0xeb/0x4e0 [ 1758.503432] alloc_pages_mpol+0xed/0x340 [ 1758.503448] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1758.503462] ? lock_is_held_type+0x9e/0x120 [ 1758.503484] new_slab+0x257/0x330 [ 1758.503500] ___slab_alloc+0x9f4/0x11f0 [ 1758.503515] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1758.503533] ? arch_stack_walk+0x86/0xf0 [ 1758.503557] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1758.503570] __slab_alloc.constprop.0+0x2c/0x60 [ 1758.503584] __kmalloc_noprof+0x51c/0x760 [ 1758.503598] ? register_lock_class+0x41/0x560 [ 1758.503616] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1758.503640] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1758.503655] ieee802_11_parse_elems_full+0x187/0x3190 [ 1758.503678] ? find_held_lock+0x2b/0x80 [ 1758.503701] ? paint_ptr+0x36/0x90 [ 1758.503717] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1758.503733] ? do_raw_spin_unlock+0x53/0x220 [ 1758.503758] ? mark_held_locks+0x49/0x80 [ 1758.503777] ? __asan_memcpy+0x3d/0x60 [ 1758.503800] ieee80211_inform_bss+0xf3/0x10b0 [ 1758.503827] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1758.503855] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1758.503876] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1758.503900] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1758.503922] ? unwind_next_frame+0x3bc/0x2540 [ 1758.503944] ? ret_from_fork_asm+0x1a/0x30 [ 1758.503964] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1758.503983] ? kernel_text_address+0x11/0xc0 [ 1758.504015] ? stack_trace_save+0x8e/0xc0 [ 1758.504035] ? stack_depot_save_flags+0x2c/0xa20 [ 1758.504056] cfg80211_inform_bss_data+0x215/0x34f0 [ 1758.504074] ? kasan_save_track+0x14/0x30 [ 1758.504095] ? __kasan_kmalloc+0x7f/0x90 [ 1758.504115] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1758.504130] ? ieee80211_iface_work+0xd52/0x1220 [ 1758.504143] ? cfg80211_wiphy_work+0x245/0x480 [ 1758.504163] ? worker_thread+0x67e/0xe90 [ 1758.504179] ? kthread+0x3c8/0x740 [ 1758.504194] ? ret_from_fork+0x38b/0x470 [ 1758.504216] ? ret_from_fork_asm+0x1a/0x30 [ 1758.504241] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1758.504265] ? __lock_acquire+0x694/0x1b70 [ 1758.504283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1758.504304] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 1758.504333] ? __lock_acquire+0x694/0x1b70 [ 1758.504361] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1758.504385] ieee80211_bss_info_update+0x2f5/0xa90 [ 1758.504410] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1758.504439] ? find_held_lock+0x2b/0x80 [ 1758.504460] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 1758.504484] ? lock_release+0xc8/0x290 [ 1758.504504] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 1758.504536] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1758.504560] ? __lock_acquire+0xc65/0x1b70 [ 1758.504592] ? mark_held_locks+0x49/0x80 [ 1758.504616] ieee80211_iface_work+0xd52/0x1220 [ 1758.504635] cfg80211_wiphy_work+0x245/0x480 [ 1758.504658] process_one_work+0x8e1/0x19c0 [ 1758.504683] ? __pfx_process_one_work+0x10/0x10 [ 1758.504701] ? move_linked_works+0x172/0x270 [ 1758.504726] ? assign_work+0x196/0x240 [ 1758.504745] worker_thread+0x67e/0xe90 [ 1758.504763] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1758.504785] ? __pfx_worker_thread+0x10/0x10 [ 1758.504803] kthread+0x3c8/0x740 [ 1758.504819] ? __pfx_kthread+0x10/0x10 [ 1758.504833] ? ret_from_fork+0x23/0x470 [ 1758.504856] ? lock_release+0xc8/0x290 [ 1758.504873] ? __pfx_kthread+0x10/0x10 [ 1758.504890] ret_from_fork+0x38b/0x470 [ 1758.504911] ? __pfx_kthread+0x10/0x10 [ 1758.504926] ret_from_fork_asm+0x1a/0x30 [ 1758.504955] [ 1758.543877] Mem-Info: [ 1758.544125] active_anon:2596 inactive_anon:248821 isolated_anon:0 [ 1758.544125] active_file:2394 inactive_file:9595 isolated_file:32 [ 1758.544125] unevictable:0 dirty:0 writeback:0 [ 1758.544125] slab_reclaimable:4067 slab_unreclaimable:56055 [ 1758.544125] mapped:70215 shmem:108 pagetables:6798 [ 1758.544125] sec_pagetables:0 bounce:0 [ 1758.544125] kernel_misc_reclaimable:0 [ 1758.544125] free:2047 free_pcp:953 free_cma:0 [ 1758.547762] Node 0 active_anon:10384kB inactive_anon:995284kB active_file:9388kB inactive_file:38092kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:280692kB dirty:0kB writeback:0kB shmem:432kB kernel_stack:9248kB pagetables:27192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1758.550284] Node 0 DMA free:6404kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8244kB active_file:4kB inactive_file:60kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1758.552985] lowmem_reserve[]: 0 1600 1600 1600 [ 1758.553463] Node 0 DMA32 free:2540kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:8192KB free_highatomic:196KB active_anon:10384kB inactive_anon:987040kB active_file:8776kB inactive_file:38180kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3796kB local_pcp:3204kB free_cma:0kB [ 1758.556396] lowmem_reserve[]: 0 0 0 0 [ 1758.556806] Node 0 DMA: 3*4kB (M) 7*8kB (UM) 8*16kB (ME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6404kB [ 1758.558345] Node 0 DMA32: 401*4kB (UMH) 213*8kB (UMH) 97*16kB (UMH) 42*32kB (UMH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6204kB [ 1758.559700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.560501] 12005 total pagecache pages [ 1758.560897] 0 pages in swap cache [ 1758.561234] Free swap = 0kB [ 1758.561525] Total swap = 0kB [ 1758.561836] 524158 pages RAM [ 1758.562127] 0 pages HighMem/MovableOnly [ 1758.562499] 110572 pages reserved [ 1758.562852] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1758.563808] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1758.564685] node 0: slabs: 540, objs: 6806, free: 0 [ 1765.051593] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.052417] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1765.053126] node 0: slabs: 767, objs: 7960, free: 0 [ 1765.053608] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.054349] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1765.055026] node 0: slabs: 767, objs: 7960, free: 0 [ 1765.055449] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.056187] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1765.056867] node 0: slabs: 767, objs: 7960, free: 0 [ 1765.057278] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.058285] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 1765.058953] node 0: slabs: 283, objs: 9056, free: 0 [ 1765.059389] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.060210] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 1765.060935] node 0: slabs: 283, objs: 9056, free: 0 [ 1765.061386] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.062181] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 1765.062891] node 0: slabs: 283, objs: 9056, free: 0 [ 1765.063317] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.064102] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 1765.064815] node 0: slabs: 283, objs: 9056, free: 0 [ 1765.065237] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.066052] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 1765.066759] node 0: slabs: 283, objs: 9056, free: 0 [ 1765.067246] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.068052] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1765.068795] node 0: slabs: 767, objs: 7960, free: 0 [ 1765.069254] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1765.070071] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1765.070814] node 0: slabs: 767, objs: 7960, free: 0 [ 1769.966837] warn_alloc: 17 callbacks suppressed [ 1769.966860] rcu_preempt: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1769.968262] CPU: 0 UID: 0 PID: 15 Comm: rcu_preempt Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1769.968279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1769.968288] Call Trace: [ 1769.968293] [ 1769.968298] dump_stack_lvl+0xfa/0x120 [ 1769.968320] warn_alloc+0x211/0x360 [ 1769.968335] ? __pfx_warn_alloc+0x10/0x10 [ 1769.968360] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1769.968376] ? __lock_acquire+0x694/0x1b70 [ 1769.968395] ? __lock_acquire+0x694/0x1b70 [ 1769.968410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1769.968424] ? lock_acquire+0x15e/0x2f0 [ 1769.968438] ? unwind_next_frame+0xb9/0x2540 [ 1769.968461] ? lock_acquire+0x15e/0x2f0 [ 1769.968475] ? unwind_next_frame+0xb9/0x2540 [ 1769.968497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1769.968517] ? policy_nodemask+0xeb/0x4e0 [ 1769.968533] alloc_pages_mpol+0xed/0x340 [ 1769.968546] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1769.968559] ? lock_is_held_type+0x9e/0x120 [ 1769.968578] new_slab+0x257/0x330 [ 1769.968593] ___slab_alloc+0x9f4/0x11f0 [ 1769.968605] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1769.968629] ? kasan_save_stack+0x34/0x50 [ 1769.968650] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1769.968662] __slab_alloc.constprop.0+0x2c/0x60 [ 1769.968674] __kmalloc_noprof+0x51c/0x760 [ 1769.968687] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1769.968703] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1769.968715] ieee802_11_parse_elems_full+0x187/0x3190 [ 1769.968735] ? find_held_lock+0x2b/0x80 [ 1769.968754] ? paint_ptr+0x36/0x90 [ 1769.968769] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1769.968782] ? do_raw_spin_unlock+0x53/0x220 [ 1769.968804] ? mark_held_locks+0x49/0x80 [ 1769.968820] ? __asan_memcpy+0x3d/0x60 [ 1769.968839] ieee80211_inform_bss+0xf3/0x10b0 [ 1769.968863] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1769.968886] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1769.968905] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1769.968925] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1769.968945] ? lock_release+0xc8/0x290 [ 1769.968960] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1769.968976] ? do_raw_spin_unlock+0x53/0x220 [ 1769.969004] ? lock_release+0xc8/0x290 [ 1769.969024] cfg80211_inform_bss_data+0x215/0x34f0 [ 1769.969041] ? ieee80211_rx_handlers+0xccc/0x9620 [ 1769.969065] ? ieee80211_rx_handlers+0xccc/0x9620 [ 1769.969084] ? __local_bh_enable_ip+0xa1/0x110 [ 1769.969098] ? ieee80211_rx_handlers+0xccc/0x9620 [ 1769.969119] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1769.969137] ? shrink_folio_list+0x1d80/0x4060 [ 1769.969150] ? reclaim_clean_pages_from_list+0x3f0/0x8e0 [ 1769.969166] ? alloc_pages_mpol+0xed/0x340 [ 1769.969179] ? folio_alloc_noprof+0x22/0x290 [ 1769.969193] ? filemap_alloc_folio_noprof+0x376/0x420 [ 1769.969212] ? page_cache_ra_unbounded+0x2b6/0x870 [ 1769.969231] ? page_cache_ra_order+0x41f/0x510 [ 1769.969250] ? filemap_fault+0x1831/0x2ca0 [ 1769.969263] ? __do_fault+0x10d/0x480 [ 1769.969279] ? __handle_mm_fault+0x11c0/0x3270 [ 1769.969291] ? handle_mm_fault+0x2c3/0x9b0 [ 1769.969304] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1769.969337] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1769.969357] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1769.969375] ? lock_release+0xc8/0x290 [ 1769.969396] ? __lock_acquire+0x694/0x1b70 [ 1769.969411] ? lock_is_held_type+0x42/0x120 [ 1769.969431] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1769.969452] ieee80211_bss_info_update+0x2f5/0xa90 [ 1769.969474] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1769.969499] ? find_held_lock+0x2b/0x80 [ 1769.969517] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 1769.969534] ieee80211_scan_rx+0x4d6/0xb20 [ 1769.969553] ? ieee80211_clean_skb+0x18f/0x6f0 [ 1769.969575] ieee80211_rx_list+0x1e1a/0x29a0 [ 1769.969593] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1769.969606] ? __lock_acquire+0xc65/0x1b70 [ 1769.969627] ? do_raw_spin_lock+0x123/0x260 [ 1769.969647] ieee80211_rx_napi+0xdb/0x3c0 [ 1769.969658] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1769.969672] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1769.969696] ieee80211_handle_queued_frames+0xd9/0x130 [ 1769.969718] tasklet_action_common+0x235/0x3b0 [ 1769.969731] ? workqueue_softirq_action+0x1a/0x170 [ 1769.969753] handle_softirqs+0x1b1/0x770 [ 1769.969776] __irq_exit_rcu+0xc4/0x100 [ 1769.969796] irq_exit_rcu+0x9/0x20 [ 1769.969806] sysvec_apic_timer_interrupt+0x70/0x80 [ 1769.969819] [ 1769.969823] [ 1769.969828] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1769.969843] RIP: 0010:finish_task_switch.isra.0+0x20f/0x840 [ 1769.969868] Code: 4c 89 ff 48 c7 03 00 00 00 00 e8 3c 93 7a 03 4d 85 e4 75 ba 4c 89 ff e8 af 79 7a 03 e8 ba 22 35 00 fb 65 48 8b 1d b9 fd 5e 06 <48> 8d bb f0 14 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 1769.969883] RSP: 0018:ffff88800962fc08 EFLAGS: 00000206 [ 1769.969894] RAX: 000000000064b611 RBX: ffff88800960b700 RCX: ffffffff817c4426 [ 1769.969903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81472256 [ 1769.969911] RBP: ffff88800962fc48 R08: 0000000000000001 R09: 0000000000000001 [ 1769.969919] R10: ffffffff86644e57 R11: 0000000000000001 R12: ffff88806ce36f18 [ 1769.969928] R13: ffff88800ef9b700 R14: ffff88800f699b80 R15: ffff88806ce36f00 [ 1769.969941] ? trace_irq_enable.constprop.0+0x26/0x100 [ 1769.969956] ? finish_task_switch.isra.0+0x206/0x840 [ 1769.969978] ? finish_task_switch.isra.0+0x206/0x840 [ 1769.970001] __schedule+0xe86/0x3580 [ 1769.970017] ? __pfx___schedule+0x10/0x10 [ 1769.970031] ? lock_acquire+0x15e/0x2f0 [ 1769.970046] ? find_held_lock+0x2b/0x80 [ 1769.970065] ? schedule+0x2c7/0x390 [ 1769.970076] ? lock_release+0xc8/0x290 [ 1769.970093] schedule+0xdb/0x390 [ 1769.970104] rcu_gp_kthread+0x2b9/0x390 [ 1769.970121] ? lock_release+0xc8/0x290 [ 1769.970135] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1769.970153] ? __kthread_parkme+0x1a7/0x250 [ 1769.970173] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1769.970189] kthread+0x3c8/0x740 [ 1769.970203] ? __pfx_kthread+0x10/0x10 [ 1769.970215] ? ret_from_fork+0x23/0x470 [ 1769.970236] ? lock_release+0xc8/0x290 [ 1769.970251] ? __pfx_kthread+0x10/0x10 [ 1769.970265] ret_from_fork+0x38b/0x470 [ 1769.970283] ? __pfx_kthread+0x10/0x10 [ 1769.970297] ret_from_fork_asm+0x1a/0x30 [ 1769.970322] [ 1770.015243] Mem-Info: [ 1770.015448] active_anon:2596 inactive_anon:248818 isolated_anon:0 [ 1770.015448] active_file:2107 inactive_file:8795 isolated_file:64 [ 1770.015448] unevictable:0 dirty:2 writeback:0 [ 1770.015448] slab_reclaimable:4067 slab_unreclaimable:57257 [ 1770.015448] mapped:70047 shmem:108 pagetables:6777 [ 1770.015448] sec_pagetables:0 bounce:0 [ 1770.015448] kernel_misc_reclaimable:0 [ 1770.015448] free:1992 free_pcp:930 free_cma:0 [ 1770.018414] Node 0 active_anon:10384kB inactive_anon:995272kB active_file:8428kB inactive_file:35180kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:280188kB dirty:8kB writeback:0kB shmem:432kB kernel_stack:9216kB pagetables:27108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1770.020457] Node 0 DMA free:6416kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8244kB active_file:4kB inactive_file:44kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1770.022698] lowmem_reserve[]: 0 1600 1600 1600 [ 1770.023084] Node 0 DMA32 free:1552kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10384kB inactive_anon:987028kB active_file:8424kB inactive_file:35264kB unevictable:0kB writepending:8kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3716kB local_pcp:1728kB free_cma:0kB [ 1770.025524] lowmem_reserve[]: 0 0 0 0 [ 1770.025867] Node 0 DMA: 8*4kB (UM) 6*8kB (M) 8*16kB (ME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6416kB [ 1770.027137] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 90*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1452kB [ 1770.028156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.028830] 11092 total pagecache pages [ 1770.029141] 0 pages in swap cache [ 1770.029432] Free swap = 0kB [ 1770.029692] Total swap = 0kB [ 1770.029936] 524158 pages RAM [ 1770.030178] 0 pages HighMem/MovableOnly [ 1770.030486] 110572 pages reserved [ 1770.068345] slab_out_of_memory: 23 callbacks suppressed [ 1770.068356] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1770.068681] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1770.068807] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1770.069514] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1770.070285] node 0: slabs: 429, objs: 5148, free: 0 [ 1770.071035] node 0: slabs: 914, objs: 8198, free: 0 [ 1770.071755] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1770.072200] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1770.072545] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1770.073259] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1770.074041] node 0: slabs: 429, objs: 5148, free: 0 [ 1770.074788] node 0: slabs: 914, objs: 8198, free: 0 [ 1770.075506] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1770.075968] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1770.076321] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1770.077024] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1770.077820] node 0: slabs: 429, objs: 5148, free: 0 [ 1770.078550] node 0: slabs: 914, objs: 8198, free: 0 [ 1770.079273] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1770.079710] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1770.080076] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1770.080783] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1770.081555] node 0: slabs: 429, objs: 5148, free: 0 [ 1770.082306] node 0: slabs: 914, objs: 8198, free: 0 [ 1770.083031] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1770.084513] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1770.085269] node 0: slabs: 429, objs: 5148, free: 0 [ 1770.085716] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1770.086419] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1770.087174] node 0: slabs: 429, objs: 5148, free: 0 [ 1773.167250] tmpfs: Invalid gid '0x00000000ffffffff' 13:34:28 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x0, 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:34:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r1}}]}) setfsgid(r1) 13:34:34 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:34:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x4, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1803.475600] random: crng reseeded on system resumption 13:35:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:35:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:35:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:35:10 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="15", 0x1}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_disconn_req={{0x6, 0xe1, 0x4}, {0x0, 0x481a}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x8, 0x2, 0x1c}}, @l2cap_conf_req={{0x4, 0x80, 0x48}, {0x0, 0x3f, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0xff, 0x80, 0x2, 0x8ee, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x70, 0x8, 0xfff8, 0x3, 0xaf4a}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0x7, 0x715, 0x80000001, 0x6}}, @l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x800, 0xffffffff, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}}]}}, 0x6c) 13:35:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:35:10 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:35:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, 0x0, 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1816.103947] No source specified [ 1816.106949] No source specified [ 1827.826416] warn_alloc: 38 callbacks suppressed [ 1827.826438] kworker/u9:5: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1827.828370] CPU: 0 UID: 0 PID: 14484 Comm: kworker/u9:5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1827.828394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1827.828406] Workqueue: events_unbound cfg80211_wiphy_work [ 1827.828439] Call Trace: [ 1827.828447] [ 1827.828454] dump_stack_lvl+0xfa/0x120 [ 1827.828478] warn_alloc+0x211/0x360 [ 1827.828498] ? __pfx_warn_alloc+0x10/0x10 [ 1827.828532] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1827.828560] ? __lock_acquire+0x694/0x1b70 [ 1827.828581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1827.828607] ? lock_acquire+0x15e/0x2f0 [ 1827.828631] ? unwind_next_frame+0xb9/0x2540 [ 1827.828661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1827.828686] ? policy_nodemask+0xeb/0x4e0 [ 1827.828707] alloc_pages_mpol+0xed/0x340 [ 1827.828725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1827.828742] ? lock_is_held_type+0x9e/0x120 [ 1827.828767] new_slab+0x257/0x330 [ 1827.828784] ___slab_alloc+0x9f4/0x11f0 [ 1827.828801] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1827.828823] ? arch_stack_walk+0x86/0xf0 [ 1827.828849] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1827.828865] __slab_alloc.constprop.0+0x2c/0x60 [ 1827.828881] __kmalloc_noprof+0x51c/0x760 [ 1827.828896] ? register_lock_class+0x41/0x560 [ 1827.828918] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1827.828942] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1827.828961] ieee802_11_parse_elems_full+0x187/0x3190 [ 1827.828990] ? find_held_lock+0x2b/0x80 [ 1827.829015] ? paint_ptr+0x36/0x90 [ 1827.829033] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1827.829051] ? do_raw_spin_unlock+0x53/0x220 [ 1827.829080] ? mark_held_locks+0x49/0x80 [ 1827.829101] ? __asan_memcpy+0x3d/0x60 [ 1827.829127] ieee80211_inform_bss+0xf3/0x10b0 [ 1827.829157] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1827.829189] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1827.829213] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1827.829240] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1827.829266] ? unwind_next_frame+0x3bc/0x2540 [ 1827.829289] ? ret_from_fork_asm+0x1a/0x30 [ 1827.829312] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1827.829333] ? kernel_text_address+0x11/0xc0 [ 1827.829369] ? stack_trace_save+0x8e/0xc0 [ 1827.829392] ? stack_depot_save_flags+0x2c/0xa20 [ 1827.829416] cfg80211_inform_bss_data+0x215/0x34f0 [ 1827.829437] ? kasan_save_track+0x14/0x30 [ 1827.829460] ? __kasan_kmalloc+0x7f/0x90 [ 1827.829483] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1827.829500] ? ieee80211_iface_work+0xd52/0x1220 [ 1827.829515] ? cfg80211_wiphy_work+0x245/0x480 [ 1827.829537] ? worker_thread+0x67e/0xe90 [ 1827.829555] ? kthread+0x3c8/0x740 [ 1827.829572] ? ret_from_fork+0x38b/0x470 [ 1827.829597] ? ret_from_fork_asm+0x1a/0x30 [ 1827.829625] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1827.829649] ? __lock_acquire+0x694/0x1b70 [ 1827.829670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1827.829694] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 1827.829727] ? __lock_acquire+0x694/0x1b70 [ 1827.829759] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1827.829787] ieee80211_bss_info_update+0x2f5/0xa90 [ 1827.829815] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1827.829848] ? find_held_lock+0x2b/0x80 [ 1827.829873] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 1827.829899] ? lock_release+0xc8/0x290 [ 1827.829922] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 1827.829977] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1827.830004] ? __lock_acquire+0xc65/0x1b70 [ 1827.830041] ? mark_held_locks+0x49/0x80 [ 1827.830068] ieee80211_iface_work+0xd52/0x1220 [ 1827.830089] cfg80211_wiphy_work+0x245/0x480 [ 1827.830116] process_one_work+0x8e1/0x19c0 [ 1827.830145] ? __pfx_process_one_work+0x10/0x10 [ 1827.830164] ? move_linked_works+0x172/0x270 [ 1827.830193] ? assign_work+0x196/0x240 [ 1827.830215] worker_thread+0x67e/0xe90 [ 1827.830235] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1827.830260] ? __pfx_worker_thread+0x10/0x10 [ 1827.830281] kthread+0x3c8/0x740 [ 1827.830299] ? __pfx_kthread+0x10/0x10 [ 1827.830316] ? ret_from_fork+0x23/0x470 [ 1827.830341] ? lock_release+0xc8/0x290 [ 1827.830361] ? __pfx_kthread+0x10/0x10 [ 1827.830379] ret_from_fork+0x38b/0x470 [ 1827.830404] ? __pfx_kthread+0x10/0x10 [ 1827.830421] ret_from_fork_asm+0x1a/0x30 [ 1827.830455] [ 1827.871921] Mem-Info: [ 1827.872187] active_anon:2596 inactive_anon:250687 isolated_anon:0 [ 1827.872187] active_file:2109 inactive_file:7559 isolated_file:32 [ 1827.872187] unevictable:0 dirty:1 writeback:0 [ 1827.872187] slab_reclaimable:4068 slab_unreclaimable:56272 [ 1827.872187] mapped:70129 shmem:108 pagetables:6873 [ 1827.872187] sec_pagetables:0 bounce:0 [ 1827.872187] kernel_misc_reclaimable:0 [ 1827.872187] free:3049 free_pcp:94 free_cma:0 [ 1827.876290] Node 0 active_anon:10384kB inactive_anon:1002748kB active_file:8520kB inactive_file:30740kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:280516kB dirty:4kB writeback:0kB shmem:432kB kernel_stack:9344kB pagetables:27492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1827.879302] Node 0 DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8260kB active_file:4kB inactive_file:60kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1827.882157] lowmem_reserve[]: 0 1600 1600 1600 [ 1827.882677] Node 0 DMA32 free:5020kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10384kB inactive_anon:994488kB active_file:8520kB inactive_file:30596kB unevictable:0kB writepending:4kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:0kB free_cma:0kB [ 1827.885756] lowmem_reserve[]: 0 0 0 0 [ 1827.886181] Node 0 DMA: 5*4kB (UM) 4*8kB (M) 8*16kB (ME) 5*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6420kB [ 1827.887813] Node 0 DMA32: 218*4kB (U) 210*8kB (UM) 133*16kB (UM) 8*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4936kB [ 1827.889218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1827.890089] 9993 total pagecache pages [ 1827.890486] 0 pages in swap cache [ 1827.890859] Free swap = 0kB [ 1827.891171] Total swap = 0kB [ 1827.891480] 524158 pages RAM [ 1827.891809] 0 pages HighMem/MovableOnly [ 1827.892207] 110572 pages reserved [ 1827.892555] slab_out_of_memory: 13 callbacks suppressed [ 1827.892565] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1827.894126] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1827.895057] node 0: slabs: 542, objs: 6166, free: 0 [ 1827.924881] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1827.924901] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1827.925806] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1827.925827] node 0: slabs: 318, objs: 3816, free: 0 [ 1827.927335] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1827.928816] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1827.929031] node 0: slabs: 543, objs: 6182, free: 0 [ 1827.929923] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1827.931297] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1827.931728] node 0: slabs: 318, objs: 3816, free: 0 [ 1827.935342] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1827.936699] node 0: slabs: 544, objs: 6198, free: 0 [ 1830.998046] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1830.999000] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1830.999858] node 0: slabs: 605, objs: 6670, free: 0 [ 1834.990591] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1834.991538] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1834.992406] node 0: slabs: 673, objs: 7240, free: 0 [ 1834.992971] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1834.993872] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1834.994721] node 0: slabs: 673, objs: 7240, free: 0 [ 1834.995238] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1834.996150] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1834.996989] node 0: slabs: 673, objs: 7240, free: 0 [ 1834.997508] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1834.998418] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1834.999254] node 0: slabs: 673, objs: 7240, free: 0 [ 1834.999795] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1835.000697] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1835.001507] node 0: slabs: 673, objs: 7240, free: 0 [ 1835.002053] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1835.002959] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1835.003790] node 0: slabs: 673, objs: 7240, free: 0 [ 1835.004303] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1835.005201] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1835.006044] node 0: slabs: 673, objs: 7240, free: 0 [ 1835.006558] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1835.007475] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1835.008309] node 0: slabs: 673, objs: 7240, free: 0 [ 1835.008867] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1835.009011] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1835.009765] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1835.011224] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1835.012058] node 0: slabs: 673, objs: 7240, free: 0 [ 1835.014128] node 0: slabs: 673, objs: 7240, free: 0 [ 1841.136363] warn_alloc: 71 callbacks suppressed [ 1841.136382] kworker/u9:3: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1841.137791] CPU: 0 UID: 0 PID: 11156 Comm: kworker/u9:3 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1841.137807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1841.137816] Workqueue: events_unbound cfg80211_wiphy_work [ 1841.137838] Call Trace: [ 1841.137843] [ 1841.137848] dump_stack_lvl+0xfa/0x120 [ 1841.137865] warn_alloc+0x211/0x360 [ 1841.137879] ? __pfx_warn_alloc+0x10/0x10 [ 1841.137903] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1841.137923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1841.137935] ? lock_acquire+0x15e/0x2f0 [ 1841.137950] ? unwind_next_frame+0xb9/0x2540 [ 1841.137972] ? unwind_next_frame+0xb9/0x2540 [ 1841.137989] ? find_held_lock+0x2b/0x80 [ 1841.138010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1841.138028] ? policy_nodemask+0xeb/0x4e0 [ 1841.138043] alloc_pages_mpol+0xed/0x340 [ 1841.138055] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1841.138067] ? lock_is_held_type+0x9e/0x120 [ 1841.138085] new_slab+0x257/0x330 [ 1841.138097] ___slab_alloc+0x9f4/0x11f0 [ 1841.138116] ? lock_acquire+0x15e/0x2f0 [ 1841.138130] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1841.138145] ? lock_acquire+0x15e/0x2f0 [ 1841.138158] ? unwind_next_frame+0xb9/0x2540 [ 1841.138176] ? find_held_lock+0x2b/0x80 [ 1841.138193] ? unwind_next_frame+0x3b2/0x2540 [ 1841.138214] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1841.138225] __slab_alloc.constprop.0+0x2c/0x60 [ 1841.138236] __kmalloc_noprof+0x51c/0x760 [ 1841.138246] ? ret_from_fork_asm+0x1a/0x30 [ 1841.138263] ? ret_from_fork_asm+0x1a/0x30 [ 1841.138278] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1841.138293] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1841.138304] ieee802_11_parse_elems_full+0x187/0x3190 [ 1841.138318] ? ret_from_fork_asm+0x1a/0x30 [ 1841.138336] ? stack_trace_save+0x8e/0xc0 [ 1841.138352] ? stack_depot_save_flags+0x2c/0xa20 [ 1841.138367] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1841.138385] ? __lock_acquire+0x694/0x1b70 [ 1841.138403] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f70 [ 1841.138424] ? __lock_acquire+0xc65/0x1b70 [ 1841.138442] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1841.138461] ? __lock_acquire+0xc65/0x1b70 [ 1841.138486] ? mark_held_locks+0x49/0x80 [ 1841.138505] ieee80211_iface_work+0xd52/0x1220 [ 1841.138520] cfg80211_wiphy_work+0x245/0x480 [ 1841.138539] process_one_work+0x8e1/0x19c0 [ 1841.138560] ? __pfx_process_one_work+0x10/0x10 [ 1841.138574] ? move_linked_works+0x172/0x270 [ 1841.138594] ? assign_work+0x196/0x240 [ 1841.138609] worker_thread+0x67e/0xe90 [ 1841.138628] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1841.138645] ? __pfx_worker_thread+0x10/0x10 [ 1841.138660] kthread+0x3c8/0x740 [ 1841.138674] ? __pfx_kthread+0x10/0x10 [ 1841.138686] ? ret_from_fork+0x23/0x470 [ 1841.138706] ? lock_release+0xc8/0x290 [ 1841.138721] ? __pfx_kthread+0x10/0x10 [ 1841.138735] ret_from_fork+0x38b/0x470 [ 1841.138753] ? __pfx_kthread+0x10/0x10 [ 1841.138766] ret_from_fork_asm+0x1a/0x30 [ 1841.138790] [ 1841.160033] Mem-Info: [ 1841.160237] active_anon:2596 inactive_anon:253780 isolated_anon:0 [ 1841.160237] active_file:1561 inactive_file:5303 isolated_file:42 [ 1841.160237] unevictable:0 dirty:26 writeback:0 [ 1841.160237] slab_reclaimable:4068 slab_unreclaimable:56096 [ 1841.160237] mapped:70079 shmem:108 pagetables:6914 [ 1841.160237] sec_pagetables:0 bounce:0 [ 1841.160237] kernel_misc_reclaimable:0 [ 1841.160237] free:2011 free_pcp:956 free_cma:0 [ 1841.163258] Node 0 active_anon:10384kB inactive_anon:1015120kB active_file:6244kB inactive_file:21336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:280316kB dirty:104kB writeback:0kB shmem:432kB kernel_stack:9408kB pagetables:27656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1841.163809] slab_out_of_memory: 56 callbacks suppressed [ 1841.163830] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.165387] Node 0 [ 1841.166150] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.166175] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.166342] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.167062] DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8256kB active_file:4kB inactive_file:36kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.167371] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.168070] lowmem_reserve[]: 0 [ 1841.168828] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.169579] 1600 1600 1600 [ 1841.175063] Node 0 DMA32 free:1624kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:10384kB inactive_anon:1006864kB active_file:6240kB inactive_file:21220kB unevictable:0kB writepending:104kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3824kB local_pcp:3092kB free_cma:0kB [ 1841.177509] lowmem_reserve[]: 0 0 0 0 [ 1841.177849] Node 0 DMA: 9*4kB (UM) 6*8kB (UM) 8*16kB (ME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6420kB [ 1841.179126] Node 0 DMA32: 0*4kB 0*8kB 50*16kB (U) 12*32kB (U) 1*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1504kB [ 1841.180177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1841.180847] 7028 total pagecache pages [ 1841.181156] 0 pages in swap cache [ 1841.181417] Free swap = 0kB [ 1841.181676] Total swap = 0kB [ 1841.181907] 524158 pages RAM [ 1841.182158] 0 pages HighMem/MovableOnly [ 1841.182465] 110572 pages reserved [ 1841.182763] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.183534] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.184236] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.186009] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.186190] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.187528] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.187552] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.188335] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.188348] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.192676] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.193453] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.194204] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.194676] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.195450] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.196189] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.196672] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.197446] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.198195] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.198249] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.198672] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1841.200055] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.200794] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1841.200808] node 0: slabs: 549, objs: 6698, free: 0 [ 1841.202131] node 0: slabs: 549, objs: 6698, free: 0 13:35:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {0x0}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:35:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6595, &(0x7f0000000080)={0x0, 0xb905, 0x8, 0x0, 0x148}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:35:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() [ 1855.265825] warn_alloc: 9 callbacks suppressed [ 1855.265842] kworker/u10:5: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1855.266290] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1855.267228] CPU: 1 UID: 0 PID: 13785 Comm: kworker/u10:5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1855.267246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1855.267256] Workqueue: events_unbound cfg80211_wiphy_work [ 1855.267282] Call Trace: [ 1855.267287] [ 1855.267292] dump_stack_lvl+0xfa/0x120 [ 1855.267309] warn_alloc+0x211/0x360 [ 1855.267324] ? __pfx_warn_alloc+0x10/0x10 [ 1855.267351] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1855.267371] ? __lock_acquire+0x694/0x1b70 [ 1855.267386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1855.267404] ? lock_acquire+0x15e/0x2f0 [ 1855.267420] ? unwind_next_frame+0xb9/0x2540 [ 1855.267442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1855.267460] ? policy_nodemask+0xeb/0x4e0 [ 1855.267475] alloc_pages_mpol+0xed/0x340 [ 1855.267490] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1855.267503] ? lock_is_held_type+0x9e/0x120 [ 1855.267522] new_slab+0x257/0x330 [ 1855.267534] ___slab_alloc+0x9f4/0x11f0 [ 1855.267546] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1855.267563] ? arch_stack_walk+0x86/0xf0 [ 1855.267584] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1855.267595] __slab_alloc.constprop.0+0x2c/0x60 [ 1855.267606] __kmalloc_noprof+0x51c/0x760 [ 1855.267621] ? register_lock_class+0x41/0x560 [ 1855.267637] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1855.267656] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1855.267669] ieee802_11_parse_elems_full+0x187/0x3190 [ 1855.267689] ? find_held_lock+0x2b/0x80 [ 1855.267707] ? paint_ptr+0x36/0x90 [ 1855.267720] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1855.267735] ? do_raw_spin_unlock+0x53/0x220 [ 1855.267756] ? mark_held_locks+0x49/0x80 [ 1855.267771] ? __asan_memcpy+0x3d/0x60 [ 1855.267789] ieee80211_inform_bss+0xf3/0x10b0 [ 1855.267814] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1855.267836] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 1855.267853] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1855.267872] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 1855.267893] ? unwind_next_frame+0x3bc/0x2540 [ 1855.267910] ? ret_from_fork_asm+0x1a/0x30 [ 1855.267927] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1855.267941] ? kernel_text_address+0x11/0xc0 [ 1855.267970] ? stack_trace_save+0x8e/0xc0 [ 1855.267988] ? stack_depot_save_flags+0x2c/0xa20 [ 1855.268005] cfg80211_inform_bss_data+0x215/0x34f0 [ 1855.268020] ? kasan_save_track+0x14/0x30 [ 1855.268039] ? __kasan_kmalloc+0x7f/0x90 [ 1855.268059] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1855.268071] ? ieee80211_iface_work+0xd52/0x1220 [ 1855.268081] ? cfg80211_wiphy_work+0x245/0x480 [ 1855.268097] ? worker_thread+0x67e/0xe90 [ 1855.268110] ? kthread+0x3c8/0x740 [ 1855.268125] ? ret_from_fork+0x38b/0x470 [ 1855.268145] ? ret_from_fork_asm+0x1a/0x30 [ 1855.268165] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1855.268182] ? __lock_acquire+0x694/0x1b70 [ 1855.268197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1855.268217] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 1855.268240] ? __lock_acquire+0x694/0x1b70 [ 1855.268263] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 1855.268286] ieee80211_bss_info_update+0x2f5/0xa90 [ 1855.268306] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1855.268329] ? find_held_lock+0x2b/0x80 [ 1855.268346] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 1855.268371] ? lock_release+0xc8/0x290 [ 1855.268388] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 1855.268414] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1855.268433] ? __lock_acquire+0xc65/0x1b70 [ 1855.268462] ? mark_held_locks+0x49/0x80 [ 1855.268482] ieee80211_iface_work+0xd52/0x1220 [ 1855.268497] cfg80211_wiphy_work+0x245/0x480 [ 1855.268516] process_one_work+0x8e1/0x19c0 [ 1855.268541] ? __pfx_process_one_work+0x10/0x10 [ 1855.268556] ? move_linked_works+0x172/0x270 [ 1855.268576] ? assign_work+0x196/0x240 [ 1855.268591] worker_thread+0x67e/0xe90 [ 1855.268609] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1855.268627] ? __pfx_worker_thread+0x10/0x10 [ 1855.268642] kthread+0x3c8/0x740 [ 1855.268654] ? __pfx_kthread+0x10/0x10 [ 1855.268666] ? ret_from_fork+0x23/0x470 [ 1855.268687] ? lock_release+0xc8/0x290 [ 1855.268702] ? __pfx_kthread+0x10/0x10 [ 1855.268715] ret_from_fork+0x38b/0x470 [ 1855.268732] ? __pfx_kthread+0x10/0x10 [ 1855.268748] ret_from_fork_asm+0x1a/0x30 [ 1855.268771] [ 1855.268793] Mem-Info: [ 1855.270273] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1855.270901] active_anon:2596 inactive_anon:253392 isolated_anon:0 [ 1855.270901] active_file:2836 inactive_file:3277 isolated_file:30 [ 1855.270901] unevictable:0 dirty:0 writeback:0 [ 1855.270901] slab_reclaimable:4060 slab_unreclaimable:57294 [ 1855.270901] mapped:70107 shmem:108 pagetables:6924 [ 1855.270901] sec_pagetables:0 bounce:0 [ 1855.270901] kernel_misc_reclaimable:0 [ 1855.270901] free:1855 free_pcp:1062 free_cma:0 [ 1855.271785] node 0: slabs: 364, objs: 4368, free: 0 [ 1855.271980] Node 0 active_anon:10384kB inactive_anon:1013568kB active_file:11344kB inactive_file:13108kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:280428kB dirty:0kB writeback:0kB shmem:432kB kernel_stack:9280kB pagetables:27696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1855.272358] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1855.272654] Node 0 DMA free:6416kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8272kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1855.273252] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1855.273564] lowmem_reserve[]: 0 [ 1855.274441] node 0: slabs: 364, objs: 4368, free: 0 [ 1855.274764] 1600 1600 1600 [ 1855.274782] Node 0 [ 1855.275687] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1855.275972] DMA32 free:1004kB boost:12480kB min:17552kB low:19176kB high:20800kB reserved_highatomic:8192KB free_highatomic:0KB active_anon:10384kB inactive_anon:1005296kB active_file:11340kB inactive_file:13084kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:4244kB local_pcp:3016kB free_cma:0kB [ 1855.276710] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1855.277089] lowmem_reserve[]: 0 [ 1855.277775] node 0: slabs: 364, objs: 4368, free: 0 [ 1855.278071] 0 0 [ 1855.278856] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1855.279153] 0 [ 1855.279748] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1855.280037] Node 0 DMA: [ 1855.280912] node 0: slabs: 364, objs: 4368, free: 0 [ 1855.281211] 5*4kB [ 1855.282017] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1855.282353] (M) 7*8kB [ 1855.283046] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1855.283373] (UM) 8*16kB [ 1855.284237] node 0: slabs: 364, objs: 4368, free: 0 [ 1855.284639] (ME) 4*32kB (UME) [ 1855.285839] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1855.286059] 5*64kB (UME) [ 1855.286986] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1855.287306] 3*128kB (UME) [ 1855.287986] node 0: slabs: 688, objs: 7046, free: 0 [ 1855.288269] 1*256kB (E) [ 1855.289129] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1855.289407] 2*512kB (ME) [ 1855.290351] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1855.290730] 2*1024kB (ME) 1*2048kB (U) [ 1855.291651] node 0: slabs: 688, objs: 7046, free: 0 [ 1855.291987] 0*4096kB = 6412kB [ 1855.291999] Node 0 DMA32: 1*4kB (M) 0*8kB [ 1855.292824] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1855.293157] 59*16kB (M) [ 1855.293920] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1855.294216] 0*32kB 0*64kB [ 1855.295036] node 0: slabs: 688, objs: 7046, free: 0 [ 1855.295394] 0*128kB 0*256kB [ 1855.296183] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1855.296392] 0*512kB 0*1024kB [ 1855.297297] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1855.297653] 0*2048kB 0*4096kB = 948kB [ 1855.297671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.298419] node 0: slabs: 688, objs: 7046, free: 0 [ 1855.298748] 6266 total pagecache pages [ 1855.298755] 0 pages in swap cache [ 1855.298760] Free swap = 0kB [ 1855.298766] Total swap = 0kB [ 1855.299435] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1855.299671] 524158 pages RAM [ 1855.299678] 0 pages HighMem/MovableOnly [ 1855.299683] 110572 pages reserved [ 1855.391192] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1855.392690] node 0: slabs: 693, objs: 7056, free: 0 13:35:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, 0x0, 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:35:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6595, &(0x7f0000000080)={0x0, 0xb905, 0x8, 0x0, 0x148}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:36:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6595, &(0x7f0000000080)={0x0, 0xb905, 0x8, 0x0, 0x148}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 13:36:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) [ 1866.264341] No source specified 13:36:18 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x80, 0x2, "467ae3", 0xfffa, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x87, 0x3f, 0x6, "0a0918", 0x5, 0x80}, {@any, 0x6, 0x9, 0x7f, "d6394e", 0x200, 0x6}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x13}, "c90408874a023d59d8a7673b5749c8723e56e9"}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "6b3ab35063f415ce953f4a4e2b33059f419d163d8dccc3cd3f489e9c229543da685888b0e12b4a94907c17604c872fddd15f1ea1f7b07299c8fbdcc6027fa4c21c58feaef71b4638b9ec2f317b65afc1a346853b711684e7d7d34682a51a04cd9735e7904c6efb318b8519780b7b062e1c"}, 0x75) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xfa39caed448c4a79, 0x0, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xff, 0x8}, {0x6, 0x60, 0x1, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x3f}, 0x27}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_cmd_rej_unk={{0x1, 0xad, 0x2}, {0x100}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xff, 0x2}, {0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0xa6a}}, @l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x1, 0x1ff, 0x7}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2, 0x1}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6d}, "0f91b3845ea7e6357d4e5e0278e3bc8aa66c8ee2c90da246aed3a7f6cf5afc95f8f58faca68a4d29c0f69025a34c3554b388a221e5efcabf92216a59d4b2b68aa9c66789ec9e4fd11b973f33f70e80b501525c8b914dd9d2629867b57ef42bf3d16039cde4f9382004c868ebbf"}, 0x71) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7, 0x2}, {0x7506}}}}, 0xf) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "18389c", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x5, 0xe8, "d4dcb7", 0x6, 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x4, 0xcf, "734e1b", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x6, 0x5, "177306", 0x7, 0x9}, {@any, 0x1f, 0x4, 0x0, "d80feb", 0x3}]}}}, 0x40) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_info_req={{0xa, 0x8a, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x4eff, 0x1, 0xfb}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x3, 0x5, 0x7fff, 0x8000}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x6737, 0x8813}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x9}}, @l2cap_disconn_req={{0x6, 0x66, 0x4}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x1000, 0x3}}]}}, 0x42) 13:36:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'nl80211\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="057f4cb4700febfa02c27e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 13:36:18 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x100}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x46}, "489530ac485893c52c305fe68aa6c769cf3df7b4980ed641e646412926a472d98e1c35fd890dfb747e24336b45911c81c172646b36e8c3e032549381e53ac19b4956b28dfce5"}, 0x4a) 13:36:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, 0x0, 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:36:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:36:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80000001, 0x58a}, 0x2c2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) 13:36:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, 0x0, 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:36:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6595, &(0x7f0000000080)={0x0, 0xb905, 0x8, 0x0, 0x148}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1887.607505] No source specified [ 1887.717574] No source specified 13:36:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb00, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[]) 13:36:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="00f78622784a366aa8b0c6203d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e00004612e66450a0cb0b3080710d0f9b7d5e0f1f834c5e9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000002700)=""/91, 0x5b}], 0x5, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1c000000000001000500000001000000680337c8e6c5645d994d96f5f557682327166df9a9aeb54141cd694d5b66741a1930825b841fca35b83150b41d5f82e6ad7c0bbcbec1cafb8f24cffd266e27d25072f5fcacd6b8ea842b61b44f57381c498524054aa0ef2b15917f906c043bc15d3cd29fd9678487fc7d422b6845ca81f9983892bd5d4f5181d1b70a014a9e90946f9515a45d8fa35e37576584df70863fbba76c7b2c445e7cea65aaccffaf61418dea8f25000ce17f502972dfb0696be675513f0d544c2607196c5b2449e80eed62ee89ff1a189a066201b92f082c6d91f23063abaf1fd62d96a193dd0fc4bb3b2b9cb9696471f072fff404c3a828ce0da966efef3540302c34978d1f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000051e85d8db924407601b0a5dc822dc721b3d159e09896fe51c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32], 0x90}, 0x40010001) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x599, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0xbb, 0x6e3, 0x5, "000baec458596b10b5ff583cb623a30030a878bb9e917953166d169f1a5e001bfd2b060bed57ca47ce62e1d1b8c28ba13b74915bd648f873c9b9663868ee554375a5b99531351cbb5c9eb6c7e5f6da81218d2b1e84dd2f6c90d356698aa15055744eec64fecc05ea45c9ba2b2529aee22de85406dc955ba58fab528615ee9bd3db541dc7d10a4a5437099a3c6f537ba1563f7e2608b5fbfb9d31855e1c1892f6e6e8587f4f5e9be3dc8afc676e79b5e05656241b4e7edd24d6f979"}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) fork() 13:36:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6595, &(0x7f0000000080)={0x0, 0xb905, 0x8, 0x0, 0x148}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1909.640650] warn_alloc: 11 callbacks suppressed [ 1909.640678] syz-fuzzer: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1909.643937] CPU: 0 UID: 0 PID: 16398 Comm: syz-fuzzer Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1909.643969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.643982] Call Trace: [ 1909.643990] [ 1909.643999] dump_stack_lvl+0xfa/0x120 [ 1909.644033] warn_alloc+0x211/0x360 [ 1909.644059] ? __pfx_warn_alloc+0x10/0x10 [ 1909.644102] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1909.644129] ? __lock_acquire+0x694/0x1b70 [ 1909.644160] ? lock_acquire+0x15e/0x2f0 [ 1909.644185] ? unwind_next_frame+0xb9/0x2540 [ 1909.644222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1909.644246] ? lock_acquire+0x15e/0x2f0 [ 1909.644271] ? unwind_next_frame+0xb9/0x2540 [ 1909.644307] ? unwind_next_frame+0x3b2/0x2540 [ 1909.644340] ? lock_release+0xc8/0x290 [ 1909.644371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1909.644404] ? policy_nodemask+0xeb/0x4e0 [ 1909.644431] alloc_pages_mpol+0xed/0x340 [ 1909.644455] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1909.644476] ? lock_is_held_type+0x9e/0x120 [ 1909.644509] new_slab+0x257/0x330 [ 1909.644532] ___slab_alloc+0x9f4/0x11f0 [ 1909.644551] ? handle_mm_fault+0x2c3/0x9b0 [ 1909.644572] ? do_user_addr_fault+0x501/0x12b0 [ 1909.644601] ? __alloc_skb+0x2ab/0x370 [ 1909.644647] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1909.644668] __slab_alloc.constprop.0+0x2c/0x60 [ 1909.644689] kmem_cache_alloc_node_noprof+0x455/0x6a0 [ 1909.644716] ? __alloc_skb+0x2ab/0x370 [ 1909.644744] ? __alloc_skb+0x2ab/0x370 [ 1909.644765] __alloc_skb+0x2ab/0x370 [ 1909.644788] ? __pfx___alloc_skb+0x10/0x10 [ 1909.644814] ? do_raw_spin_lock+0x123/0x260 [ 1909.644845] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1909.644880] skb_copy+0x1d5/0x3b0 [ 1909.644900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1909.644931] mac80211_hwsim_tx_frame_no_nl.isra.0+0xafa/0x1320 [ 1909.644971] ? lock_acquire+0x15e/0x2f0 [ 1909.644997] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 1909.645032] ? mark_held_locks+0x49/0x80 [ 1909.645061] ? read_tsc+0x9/0x20 [ 1909.645090] ? mac80211_hwsim_monitor_rx+0x1de/0x850 [ 1909.645119] mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 1909.645152] mac80211_hwsim_beacon_tx+0x53f/0x940 [ 1909.645191] __iterate_interfaces+0x2e0/0x650 [ 1909.645219] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1909.645251] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1909.645281] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1909.645314] mac80211_hwsim_beacon+0x105/0x1b0 [ 1909.645335] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1909.645359] __hrtimer_run_queues+0x1ee/0xac0 [ 1909.645406] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1909.645441] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 1909.645480] hrtimer_run_softirq+0x14c/0x310 [ 1909.645505] handle_softirqs+0x1b1/0x770 [ 1909.645546] __irq_exit_rcu+0xc4/0x100 [ 1909.645580] irq_exit_rcu+0x9/0x20 [ 1909.645597] sysvec_apic_timer_interrupt+0x70/0x80 [ 1909.645620] [ 1909.645626] [ 1909.645635] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1909.645659] RIP: 0010:__asan_memcpy+0x6/0x60 [ 1909.645691] Code: 5c 41 5d e9 5c ba 0e 03 5d 31 c0 41 5c 41 5d e9 00 1d 11 03 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 55 <49> 89 fd 41 54 49 89 d4 31 d2 55 48 89 f5 48 8b 4c 24 18 4c 89 e6 [ 1909.645712] RSP: 0018:ffff8880489c70e0 EFLAGS: 00000293 [ 1909.645730] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff81937213 [ 1909.645745] RDX: 0000000000000028 RSI: ffff8880489c7290 RDI: ffff8880489c72e0 [ 1909.645760] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100fffbaba [ 1909.645774] R10: 0000000000000004 R11: 0000000000000001 R12: 0000000000000001 [ 1909.645787] R13: 0000000000000000 R14: 0000000000000020 R15: dffffc0000000000 [ 1909.645808] ? shrink_lruvec+0x6d3/0x2730 [ 1909.645839] shrink_lruvec+0x899/0x2730 [ 1909.645878] ? __pfx_shrink_lruvec+0x10/0x10 [ 1909.645903] ? lock_acquire+0x15e/0x2f0 [ 1909.645933] ? __lock_acquire+0x694/0x1b70 [ 1909.645959] ? __lock_acquire+0x652/0x1b70 [ 1909.645993] ? lock_acquire+0x15e/0x2f0 [ 1909.646018] ? percpu_ref_put_many.constprop.0+0x1b/0x1b0 [ 1909.646052] ? find_held_lock+0x2b/0x80 [ 1909.646086] ? percpu_ref_put_many.constprop.0+0x7b/0x1b0 [ 1909.646119] ? lock_release+0xc8/0x290 [ 1909.646148] ? lock_is_held_type+0x9e/0x120 [ 1909.646172] ? page_counter_calculate_protection+0x2f4/0x6e0 [ 1909.646205] shrink_node+0xa66/0x26a0 [ 1909.646244] ? __pfx_shrink_node+0x10/0x10 [ 1909.646268] ? vmpressure+0x2f2/0x380 [ 1909.646303] do_try_to_free_pages+0x312/0x1770 [ 1909.646347] try_to_free_pages+0x28c/0x600 [ 1909.646373] ? __pfx_try_to_free_pages+0x10/0x10 [ 1909.646408] ? find_held_lock+0x2b/0x80 [ 1909.646441] ? fs_reclaim_acquire+0xae/0x150 [ 1909.646470] ? lock_release+0xc8/0x290 [ 1909.646500] __alloc_frozen_pages_noprof+0x8cd/0x1f20 [ 1909.646525] ? lock_is_held_type+0x9e/0x120 [ 1909.646553] ? find_held_lock+0x2b/0x80 [ 1909.646587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1909.646609] ? lock_release+0xc8/0x290 [ 1909.646644] ? __lock_acquire+0xc65/0x1b70 [ 1909.646673] ? __lock_acquire+0x694/0x1b70 [ 1909.646697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1909.646728] ? policy_nodemask+0xeb/0x4e0 [ 1909.646754] alloc_pages_mpol+0xed/0x340 [ 1909.646777] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1909.646802] ? find_held_lock+0x2b/0x80 [ 1909.646835] ? xa_load+0x148/0x2c0 [ 1909.646881] folio_alloc_noprof+0x22/0x290 [ 1909.646910] filemap_alloc_folio_noprof+0x376/0x420 [ 1909.646942] ? __pfx_xa_load+0x10/0x10 [ 1909.646973] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1909.647008] ? css_rstat_updated+0x1b8/0x4d0 [ 1909.647044] page_cache_ra_unbounded+0x2b6/0x870 [ 1909.647090] page_cache_ra_order+0x41f/0x510 [ 1909.647128] filemap_fault+0x1831/0x2ca0 [ 1909.647161] ? __pfx_filemap_fault+0x10/0x10 [ 1909.647199] __do_fault+0x10d/0x480 [ 1909.647232] __handle_mm_fault+0x11c0/0x3270 [ 1909.647255] ? lock_vma_under_rcu+0x117/0x530 [ 1909.647285] ? __pfx___handle_mm_fault+0x10/0x10 [ 1909.647309] ? lock_vma_under_rcu+0x174/0x530 [ 1909.647357] handle_mm_fault+0x2c3/0x9b0 [ 1909.647379] ? access_error+0x17d/0x380 [ 1909.647408] do_user_addr_fault+0x501/0x12b0 [ 1909.647443] exc_page_fault+0xb0/0x180 [ 1909.647466] asm_exc_page_fault+0x26/0x30 [ 1909.647487] RIP: 0033:0x448b50 [ 1909.647502] Code: 8b 05 ac 9d 6c 00 48 8b 4c 24 30 48 89 0c 24 48 89 44 24 08 e8 11 00 00 00 eb d1 e8 4a 9a 01 00 e9 45 ff ff ff cc cc cc cc cc <48> 8b 44 24 08 48 8b 48 08 48 8b 91 a0 00 00 00 48 83 c2 f8 48 89 [ 1909.647523] RSP: 002b:000000c003743930 EFLAGS: 00010206 [ 1909.647539] RAX: 0000000000465c30 RBX: 0000000000000008 RCX: 000000c0037439d0 [ 1909.647553] RDX: 2e7463656c666572 RSI: 000000000115afd8 RDI: 000000000099c611 [ 1909.647568] RBP: 000000c003743960 R08: 000000c003743848 R09: 000000000115b055 [ 1909.647582] R10: 0000000000ed0080 R11: 000000000115bfe0 R12: 00000000000000f1 [ 1909.647595] R13: 0000000000000000 R14: 0000000000e5dacd R15: 0000000000000000 [ 1909.647624] [ 1909.733992] Mem-Info: [ 1909.734356] active_anon:2596 inactive_anon:256285 isolated_anon:0 [ 1909.734356] active_file:472 inactive_file:364 isolated_file:32 [ 1909.734356] unevictable:0 dirty:2 writeback:0 [ 1909.734356] slab_reclaimable:4032 slab_unreclaimable:57983 [ 1909.734356] mapped:69752 shmem:108 pagetables:6964 [ 1909.734356] sec_pagetables:0 bounce:0 [ 1909.734356] kernel_misc_reclaimable:0 [ 1909.734356] free:4516 free_pcp:85 free_cma:0 [ 1909.739591] Node 0 active_anon:10384kB inactive_anon:1025140kB active_file:1888kB inactive_file:1328kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:279008kB dirty:8kB writeback:0kB shmem:432kB kernel_stack:9344kB pagetables:27856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1909.742838] Node 0 DMA free:6440kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.746341] lowmem_reserve[]: 0 1600 1600 1600 [ 1909.746995] Node 0 DMA32 free:11624kB boost:12288kB min:17360kB low:18984kB high:20608kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:10384kB inactive_anon:1016844kB active_file:1888kB inactive_file:1324kB unevictable:0kB writepending:8kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:348kB local_pcp:0kB free_cma:0kB [ 1909.750879] lowmem_reserve[]: 0 0 0 0 [ 1909.751415] Node 0 DMA: 11*4kB (UM) 7*8kB (UM) 8*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6436kB [ 1909.753477] Node 0 DMA32: 1319*4kB (UME) 337*8kB (UM) 204*16kB (UM) 11*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11588kB [ 1909.755310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.756367] 943 total pagecache pages [ 1909.756864] 0 pages in swap cache [ 1909.757298] Free swap = 0kB [ 1909.757713] Total swap = 0kB [ 1909.758100] 524158 pages RAM [ 1909.758492] 0 pages HighMem/MovableOnly [ 1909.759033] 110572 pages reserved [ 1909.759482] slab_out_of_memory: 2 callbacks suppressed [ 1909.759494] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1909.761255] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1909.762493] node 0: slabs: 316, objs: 3792, free: 0 [ 1943.436773] kworker/u9:2: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 1943.438784] CPU: 0 UID: 0 PID: 70 Comm: kworker/u9:2 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1943.438815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1943.438830] Workqueue: events_unbound cfg80211_wiphy_work [ 1943.438868] Call Trace: [ 1943.438876] [ 1943.438885] dump_stack_lvl+0xfa/0x120 [ 1943.438917] warn_alloc+0x211/0x360 [ 1943.438944] ? __pfx_warn_alloc+0x10/0x10 [ 1943.438989] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 1943.439027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1943.439049] ? lock_acquire+0x15e/0x2f0 [ 1943.439076] ? unwind_next_frame+0xb9/0x2540 [ 1943.439117] ? unwind_next_frame+0xb9/0x2540 [ 1943.439150] ? find_held_lock+0x2b/0x80 [ 1943.439189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1943.439221] ? policy_nodemask+0xeb/0x4e0 [ 1943.439259] alloc_pages_mpol+0xed/0x340 [ 1943.439284] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1943.439306] ? lock_is_held_type+0x9e/0x120 [ 1943.439339] new_slab+0x257/0x330 [ 1943.439362] ___slab_alloc+0x9f4/0x11f0 [ 1943.439382] ? lock_acquire+0x15e/0x2f0 [ 1943.439408] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1943.439435] ? lock_acquire+0x15e/0x2f0 [ 1943.439460] ? unwind_next_frame+0xb9/0x2540 [ 1943.439494] ? find_held_lock+0x2b/0x80 [ 1943.439527] ? unwind_next_frame+0x3b2/0x2540 [ 1943.439565] ? __slab_alloc.constprop.0+0x2c/0x60 [ 1943.439586] __slab_alloc.constprop.0+0x2c/0x60 [ 1943.439608] __kmalloc_noprof+0x51c/0x760 [ 1943.439634] ? ret_from_fork_asm+0x1a/0x30 [ 1943.439664] ? ret_from_fork_asm+0x1a/0x30 [ 1943.439692] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1943.439720] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 1943.439742] ieee802_11_parse_elems_full+0x187/0x3190 [ 1943.439767] ? __lock_acquire+0xc65/0x1b70 [ 1943.439805] ? do_raw_spin_lock+0x123/0x260 [ 1943.439835] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1943.439857] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1943.439898] ? __lock_acquire+0x694/0x1b70 [ 1943.439932] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f70 [ 1943.439971] ? __lock_acquire+0xc65/0x1b70 [ 1943.440005] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1943.440041] ? __lock_acquire+0xc65/0x1b70 [ 1943.440089] ? mark_held_locks+0x49/0x80 [ 1943.440125] ieee80211_iface_work+0xd52/0x1220 [ 1943.440154] cfg80211_wiphy_work+0x245/0x480 [ 1943.440189] process_one_work+0x8e1/0x19c0 [ 1943.440228] ? __pfx_process_one_work+0x10/0x10 [ 1943.440255] ? move_linked_works+0x172/0x270 [ 1943.440293] ? assign_work+0x196/0x240 [ 1943.440321] worker_thread+0x67e/0xe90 [ 1943.440348] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1943.440381] ? __pfx_worker_thread+0x10/0x10 [ 1943.440410] kthread+0x3c8/0x740 [ 1943.440434] ? __pfx_kthread+0x10/0x10 [ 1943.440457] ? ret_from_fork+0x23/0x470 [ 1943.440491] ? lock_release+0xc8/0x290 [ 1943.440518] ? __pfx_kthread+0x10/0x10 [ 1943.440543] ret_from_fork+0x38b/0x470 [ 1943.440575] ? __pfx_kthread+0x10/0x10 [ 1943.440599] ret_from_fork_asm+0x1a/0x30 [ 1943.440643] [ 1943.470850] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.471289] Mem-Info: [ 1943.471442] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.472287] active_anon:2596 inactive_anon:256286 isolated_anon:0 [ 1943.472287] active_file:107 inactive_file:2573 isolated_file:64 [ 1943.472287] unevictable:0 dirty:2 writeback:0 [ 1943.472287] slab_reclaimable:3934 slab_unreclaimable:57860 [ 1943.472287] mapped:69692 shmem:108 pagetables:6964 [ 1943.472287] sec_pagetables:0 bounce:0 [ 1943.472287] kernel_misc_reclaimable:0 [ 1943.472287] free:1620 free_pcp:1271 free_cma:0 [ 1943.472492] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.473185] Node 0 active_anon:10384kB inactive_anon:1025144kB active_file:428kB inactive_file:10292kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:278768kB dirty:8kB writeback:0kB shmem:432kB kernel_stack:9344kB pagetables:27856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1943.473436] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.474285] Node 0 [ 1943.474536] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.475150] DMA free:6416kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1943.475359] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.475960] lowmem_reserve[]: [ 1943.476671] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.476840] 0 [ 1943.477132] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.477707] 1600 [ 1943.478021] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.478360] 1600 [ 1943.484655] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.486194] 1600 [ 1943.486593] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.490285] [ 1943.491070] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.491417] Node 0 [ 1943.501691] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.503113] DMA32 free:64kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:16KB active_anon:10384kB inactive_anon:1016848kB active_file:428kB inactive_file:10376kB unevictable:0kB writepending:8kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:5080kB local_pcp:3068kB free_cma:0kB [ 1943.503292] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.504630] lowmem_reserve[]: 0 [ 1943.504780] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.505523] 0 [ 1943.509661] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.511438] 0 [ 1943.512164] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.512666] 0 [ 1943.513060] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.513334] [ 1943.517025] Node 0 DMA: 11*4kB (UM) 6*8kB (M) 7*16kB (ME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6412kB [ 1943.519416] Node 0 DMA32: 0*4kB 0*8kB 1*16kB (H) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1943.519644] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.521133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.521907] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.523132] 2857 total pagecache pages [ 1943.523868] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.525204] 0 pages in swap cache [ 1943.525743] Free swap = 0kB [ 1943.526195] Total swap = 0kB [ 1943.526669] 524158 pages RAM [ 1943.527124] 0 pages HighMem/MovableOnly [ 1943.527729] 110572 pages reserved [ 1943.528245] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.529686] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.531036] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.533409] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1943.534226] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1943.534269] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1943.534966] node 0: slabs: 716, objs: 6024, free: 0 [ 1943.537058] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 1943.538471] node 0: slabs: 307, objs: 3684, free: 0 [ 1953.689376] systemd-journal invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-250 [ 1953.691014] CPU: 0 UID: 0 PID: 99 Comm: systemd-journal Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 1953.691032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.691041] Call Trace: [ 1953.691046] [ 1953.691052] dump_stack_lvl+0xfa/0x120 [ 1953.691074] dump_header+0x107/0x950 [ 1953.691098] oom_kill_process+0x278/0xa00 [ 1953.691117] ? oom_cpuset_eligible.isra.0+0x19b/0x2d0 [ 1953.691140] out_of_memory+0x138f/0x1690 [ 1953.691156] ? __pfx_out_of_memory+0x10/0x10 [ 1953.691174] __alloc_frozen_pages_noprof+0x1980/0x1f20 [ 1953.691197] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1953.691213] ? __blk_flush_plug+0x28b/0x460 [ 1953.691234] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1953.691254] ? policy_nodemask+0xeb/0x4e0 [ 1953.691270] alloc_pages_mpol+0xed/0x340 [ 1953.691284] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1953.691299] ? filemap_get_entry+0x1b1/0x3b0 [ 1953.691314] ? lock_release+0xc8/0x290 [ 1953.691332] folio_alloc_noprof+0x22/0x290 [ 1953.691348] filemap_alloc_folio_noprof+0x376/0x420 [ 1953.691384] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1953.691404] ? down_read+0x1b1/0x470 [ 1953.691423] __filemap_get_folio+0x384/0x960 [ 1953.691436] ? page_cache_ra_order+0x41f/0x510 [ 1953.691459] filemap_fault+0x1889/0x2ca0 [ 1953.691478] ? __pfx_filemap_fault+0x10/0x10 [ 1953.691501] __do_fault+0x10d/0x480 [ 1953.691521] __handle_mm_fault+0x11c0/0x3270 [ 1953.691535] ? lock_vma_under_rcu+0x117/0x530 [ 1953.691553] ? __pfx___handle_mm_fault+0x10/0x10 [ 1953.691567] ? lock_vma_under_rcu+0x174/0x530 [ 1953.691595] handle_mm_fault+0x2c3/0x9b0 [ 1953.691609] ? access_error+0x17d/0x380 [ 1953.691632] do_user_addr_fault+0x501/0x12b0 [ 1953.691653] exc_page_fault+0xb0/0x180 [ 1953.691667] asm_exc_page_fault+0x26/0x30 [ 1953.691681] RIP: 0033:0x7f007bf4b470 [ 1953.691700] Code: Unable to access opcode bytes at 0x7f007bf4b446. [ 1953.691707] RSP: 002b:00007ffedff09860 EFLAGS: 00010202 [ 1953.691718] RAX: 0000000000000001 RBX: 00000000000af7c8 RCX: 00007f007bf4b344 [ 1953.691726] RDX: 00007ffedff09868 RSI: 00007ffedff09868 RDI: 000056150340b330 [ 1953.691735] RBP: 00007ffedff098e8 R08: 0000000000000001 R09: 00000000000af7c8 [ 1953.691743] R10: 0000000000000002 R11: 000000000034956e R12: 00007f007a86d7c8 [ 1953.691751] R13: 000056150340a290 R14: 0000000000000006 R15: 00007ffedff09870 [ 1953.691769] [ 1953.710518] Mem-Info: [ 1953.710769] active_anon:2596 inactive_anon:256287 isolated_anon:0 [ 1953.710769] active_file:25 inactive_file:515 isolated_file:0 [ 1953.710769] unevictable:0 dirty:0 writeback:0 [ 1953.710769] slab_reclaimable:3934 slab_unreclaimable:58203 [ 1953.710769] mapped:69666 shmem:108 pagetables:6964 [ 1953.710769] sec_pagetables:0 bounce:0 [ 1953.710769] kernel_misc_reclaimable:0 [ 1953.710769] free:4482 free_pcp:227 free_cma:0 [ 1953.714316] Node 0 active_anon:10384kB inactive_anon:1025148kB active_file:100kB inactive_file:1872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278664kB dirty:0kB writeback:0kB shmem:432kB kernel_stack:9344kB pagetables:27856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1953.716914] Node 0 DMA free:6424kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1953.719867] lowmem_reserve[]: 0 1600 1600 1600 [ 1953.720368] Node 0 DMA32 free:11504kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:6144KB free_highatomic:0KB active_anon:10384kB inactive_anon:1016852kB active_file:100kB inactive_file:1956kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:1024kB local_pcp:0kB free_cma:0kB [ 1953.723103] lowmem_reserve[]: 0 0 0 0 [ 1953.723501] Node 0 DMA: 10*4kB (M) 6*8kB (M) 8*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6424kB [ 1953.725363] Node 0 DMA32: 845*4kB (UME) 477*8kB (UM) 168*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9884kB [ 1953.726653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1953.727557] 1284 total pagecache pages [ 1953.728024] 0 pages in swap cache [ 1953.728359] Free swap = 0kB [ 1953.728713] Total swap = 0kB [ 1953.729074] 524158 pages RAM [ 1953.729445] 0 pages HighMem/MovableOnly [ 1953.729837] 110572 pages reserved [ 1953.730229] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=99,uid=0 [ 1953.732003] Out of memory (oom_kill_allocating_task): Killed process 99 (systemd-journal) total-vm:31956kB, anon-rss:768kB, file-rss:20kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:-250 [ 1954.111244] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1954.119798] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 1954.385490] systemd[1]: systemd-journald.service: Consumed 1min 45.159s CPU time. [ 1954.453249] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 1955.150440] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1959.161748] systemd[1]: systemd-journal-flush.service: Succeeded. [ 1959.184039] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1959.193877] systemd[1]: Stopped Journal Service. [ 1959.194562] systemd[1]: systemd-journald.service: Consumed 1min 45.159s CPU time. [ 1959.553450] systemd[1]: Starting Journal Service... [ 1964.149473] systemd-journald[34052]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1993.471959] systemd[1]: Started Journal Service. [ 2004.052106] warn_alloc: 31 callbacks suppressed [ 2004.052126] kworker/u10:3: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2004.052206] slab_out_of_memory: 22 callbacks suppressed [ 2004.052228] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2004.052540] ,cpuset= [ 2004.053426] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2004.053442] node 0: slabs: 287, objs: 3444, free: 0 [ 2004.054134] / [ 2004.054879] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2004.055156] ,mems_allowed=0 [ 2004.055934] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2004.056357] [ 2004.056507] node 0: slabs: 287, objs: 3444, free: 0 [ 2004.057274] CPU: 1 UID: 0 PID: 31131 Comm: kworker/u10:3 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2004.057292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2004.057302] Workqueue: events_unbound cfg80211_wiphy_work [ 2004.057325] Call Trace: [ 2004.057330] [ 2004.057335] dump_stack_lvl+0xfa/0x120 [ 2004.057353] warn_alloc+0x211/0x360 [ 2004.057369] ? __pfx_warn_alloc+0x10/0x10 [ 2004.057393] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2004.057413] ? __lock_acquire+0x694/0x1b70 [ 2004.057429] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2004.057447] ? lock_acquire+0x15e/0x2f0 [ 2004.057460] ? unwind_next_frame+0xb9/0x2540 [ 2004.057482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2004.057500] ? policy_nodemask+0xeb/0x4e0 [ 2004.057516] alloc_pages_mpol+0xed/0x340 [ 2004.057529] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2004.057541] ? lock_is_held_type+0x9e/0x120 [ 2004.057560] new_slab+0x257/0x330 [ 2004.057572] ___slab_alloc+0x9f4/0x11f0 [ 2004.057584] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2004.057600] ? arch_stack_walk+0x86/0xf0 [ 2004.057623] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2004.057634] __slab_alloc.constprop.0+0x2c/0x60 [ 2004.057645] __kmalloc_noprof+0x51c/0x760 [ 2004.057656] ? register_lock_class+0x41/0x560 [ 2004.057672] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2004.057687] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2004.057699] ieee802_11_parse_elems_full+0x187/0x3190 [ 2004.057718] ? find_held_lock+0x2b/0x80 [ 2004.057736] ? paint_ptr+0x36/0x90 [ 2004.057750] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2004.057763] ? do_raw_spin_unlock+0x53/0x220 [ 2004.057783] ? mark_held_locks+0x49/0x80 [ 2004.057799] ? __asan_memcpy+0x3d/0x60 [ 2004.057818] ieee80211_inform_bss+0xf3/0x10b0 [ 2004.057839] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2004.057862] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 2004.057879] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2004.057898] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2004.057917] ? unwind_next_frame+0x3bc/0x2540 [ 2004.057934] ? ret_from_fork_asm+0x1a/0x30 [ 2004.057950] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2004.057966] ? kernel_text_address+0x11/0xc0 [ 2004.057992] ? stack_trace_save+0x8e/0xc0 [ 2004.058008] ? stack_depot_save_flags+0x2c/0xa20 [ 2004.058026] cfg80211_inform_bss_data+0x215/0x34f0 [ 2004.058041] ? kasan_save_track+0x14/0x30 [ 2004.058057] ? __kasan_kmalloc+0x7f/0x90 [ 2004.058074] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2004.058086] ? ieee80211_iface_work+0xd52/0x1220 [ 2004.058097] ? cfg80211_wiphy_work+0x245/0x480 [ 2004.058113] ? worker_thread+0x67e/0xe90 [ 2004.058127] ? kthread+0x3c8/0x740 [ 2004.058139] ? ret_from_fork+0x38b/0x470 [ 2004.058157] ? ret_from_fork_asm+0x1a/0x30 [ 2004.058177] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2004.058194] ? __lock_acquire+0x694/0x1b70 [ 2004.058209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2004.058226] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 2004.058249] ? __lock_acquire+0x694/0x1b70 [ 2004.058272] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2004.058292] ieee80211_bss_info_update+0x2f5/0xa90 [ 2004.058313] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2004.058336] ? find_held_lock+0x2b/0x80 [ 2004.058354] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 2004.058373] ? lock_release+0xc8/0x290 [ 2004.058389] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 2004.058416] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2004.058435] ? __lock_acquire+0xc65/0x1b70 [ 2004.058462] ? mark_held_locks+0x49/0x80 [ 2004.058481] ieee80211_iface_work+0xd52/0x1220 [ 2004.058496] cfg80211_wiphy_work+0x245/0x480 [ 2004.058515] process_one_work+0x8e1/0x19c0 [ 2004.058536] ? __pfx_process_one_work+0x10/0x10 [ 2004.058550] ? move_linked_works+0x172/0x270 [ 2004.058571] ? assign_work+0x196/0x240 [ 2004.058586] worker_thread+0x67e/0xe90 [ 2004.058601] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2004.058619] ? __pfx_worker_thread+0x10/0x10 [ 2004.058634] kthread+0x3c8/0x740 [ 2004.058647] ? __pfx_kthread+0x10/0x10 [ 2004.058659] ? ret_from_fork+0x23/0x470 [ 2004.058677] ? lock_release+0xc8/0x290 [ 2004.058691] ? __pfx_kthread+0x10/0x10 [ 2004.058705] ret_from_fork+0x38b/0x470 [ 2004.058722] ? __pfx_kthread+0x10/0x10 [ 2004.058735] ret_from_fork_asm+0x1a/0x30 [ 2004.058758] [ 2004.058779] Mem-Info: [ 2004.058867] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2004.059704] active_anon:2601 inactive_anon:256367 isolated_anon:0 [ 2004.059704] active_file:28 inactive_file:2646 isolated_file:32 [ 2004.059704] unevictable:0 dirty:0 writeback:0 [ 2004.059704] slab_reclaimable:3931 slab_unreclaimable:57747 [ 2004.059704] mapped:69651 shmem:109 pagetables:6978 [ 2004.059704] sec_pagetables:0 bounce:0 [ 2004.059704] kernel_misc_reclaimable:0 [ 2004.059704] free:2077 free_pcp:838 free_cma:0 [ 2004.060386] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2004.060845] Node 0 active_anon:10404kB inactive_anon:1025468kB active_file:112kB inactive_file:10584kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:278604kB dirty:0kB writeback:0kB shmem:436kB kernel_stack:9376kB pagetables:27912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2004.061053] node 0: slabs: 287, objs: 3444, free: 0 [ 2004.061241] Node 0 [ 2004.061572] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2004.061883] DMA free:6412kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8300kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2004.062218] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2004.062670] lowmem_reserve[]: [ 2004.063016] node 0: slabs: 287, objs: 3444, free: 0 [ 2004.063475] 0 [ 2004.063814] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2004.064180] 1600 [ 2004.064626] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2004.064970] 1600 [ 2004.065303] node 0: slabs: 287, objs: 3444, free: 0 [ 2004.065704] 1600 [ 2004.066781] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2004.067101] [ 2004.067443] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2004.067849] Node 0 DMA32 free:1896kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10400kB inactive_anon:1017168kB active_file:36kB inactive_file:10584kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3340kB local_pcp:3092kB free_cma:0kB [ 2004.068235] node 0: slabs: 513, objs: 5716, free: 0 [ 2004.068575] lowmem_reserve[]: [ 2004.069025] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2004.069418] 0 [ 2004.069872] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2004.070288] 0 [ 2004.070642] node 0: slabs: 513, objs: 5716, free: 0 [ 2004.070932] 0 [ 2004.071448] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2004.071775] 0 [ 2004.072113] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2004.072427] [ 2004.072815] node 0: slabs: 513, objs: 5716, free: 0 [ 2004.073225] Node 0 [ 2004.073759] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2004.074116] DMA: [ 2004.074567] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2004.074953] 12*4kB [ 2004.075289] node 0: slabs: 513, objs: 5716, free: 0 [ 2004.075792] (M) [ 2004.076216] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2004.076507] 5*8kB [ 2004.076927] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2004.077340] (UM) [ 2004.077704] node 0: slabs: 513, objs: 5716, free: 0 [ 2004.078032] 7*16kB (ME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6408kB [ 2004.122870] Node 0 DMA32: 19*4kB (UE) 10*8kB (UE) 105*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1836kB [ 2004.124213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2004.125147] 2808 total pagecache pages [ 2004.125479] 0 pages in swap cache [ 2004.125793] Free swap = 0kB [ 2004.126051] Total swap = 0kB [ 2004.126312] 524158 pages RAM [ 2004.126579] 0 pages HighMem/MovableOnly [ 2004.126938] 110572 pages reserved [ 2022.178216] warn_alloc: 21 callbacks suppressed [ 2022.178235] ksoftirqd/0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2022.179668] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2022.179687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.179696] Call Trace: [ 2022.179701] [ 2022.179706] dump_stack_lvl+0xfa/0x120 [ 2022.179729] warn_alloc+0x211/0x360 [ 2022.179744] ? __pfx_warn_alloc+0x10/0x10 [ 2022.179770] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2022.179787] ? __lock_acquire+0x694/0x1b70 [ 2022.179807] ? __lock_acquire+0x694/0x1b70 [ 2022.179824] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2022.179839] ? lock_acquire+0x15e/0x2f0 [ 2022.179855] ? unwind_next_frame+0xb9/0x2540 [ 2022.179879] ? lock_acquire+0x15e/0x2f0 [ 2022.179895] ? unwind_next_frame+0xb9/0x2540 [ 2022.179918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2022.179939] ? policy_nodemask+0xeb/0x4e0 [ 2022.179955] alloc_pages_mpol+0xed/0x340 [ 2022.179970] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2022.179984] ? lock_is_held_type+0x9e/0x120 [ 2022.180003] new_slab+0x257/0x330 [ 2022.180018] ___slab_alloc+0x9f4/0x11f0 [ 2022.180031] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2022.180052] ? kasan_save_stack+0x34/0x50 [ 2022.180075] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2022.180088] __slab_alloc.constprop.0+0x2c/0x60 [ 2022.180101] __kmalloc_noprof+0x51c/0x760 [ 2022.180115] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2022.180143] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2022.180159] ieee802_11_parse_elems_full+0x187/0x3190 [ 2022.180187] ? find_held_lock+0x2b/0x80 [ 2022.180213] ? paint_ptr+0x36/0x90 [ 2022.180227] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2022.180242] ? do_raw_spin_unlock+0x53/0x220 [ 2022.180265] ? mark_held_locks+0x49/0x80 [ 2022.180282] ? __asan_memcpy+0x3d/0x60 [ 2022.180303] ieee80211_inform_bss+0xf3/0x10b0 [ 2022.180328] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2022.180353] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 2022.180373] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2022.180396] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2022.180417] ? lock_release+0xc8/0x290 [ 2022.180433] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2022.180451] ? do_raw_spin_unlock+0x53/0x220 [ 2022.180481] ? lock_release+0xc8/0x290 [ 2022.180502] cfg80211_inform_bss_data+0x215/0x34f0 [ 2022.180521] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2022.180547] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2022.180568] ? __local_bh_enable_ip+0xa1/0x110 [ 2022.180582] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2022.180605] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2022.180629] ? __lock_acquire+0x694/0x1b70 [ 2022.180648] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 2022.180673] ? lock_acquire+0x15e/0x2f0 [ 2022.180689] ? unwind_next_frame+0xb9/0x2540 [ 2022.180716] ? __lock_acquire+0x694/0x1b70 [ 2022.180732] ? lock_is_held_type+0x42/0x120 [ 2022.180754] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2022.180776] ieee80211_bss_info_update+0x2f5/0xa90 [ 2022.180800] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2022.180827] ? find_held_lock+0x2b/0x80 [ 2022.180847] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 2022.180865] ieee80211_scan_rx+0x4d6/0xb20 [ 2022.180885] ? ieee80211_clean_skb+0x18f/0x6f0 [ 2022.180909] ieee80211_rx_list+0x1e1a/0x29a0 [ 2022.180929] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 2022.180942] ? __lock_acquire+0xc65/0x1b70 [ 2022.180965] ? do_raw_spin_lock+0x123/0x260 [ 2022.180986] ieee80211_rx_napi+0xdb/0x3c0 [ 2022.180999] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 2022.181014] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2022.181040] ieee80211_handle_queued_frames+0xd9/0x130 [ 2022.181063] tasklet_action_common+0x235/0x3b0 [ 2022.181077] ? workqueue_softirq_action+0x1a/0x170 [ 2022.181100] handle_softirqs+0x1b1/0x770 [ 2022.181124] ? __pfx_run_ksoftirqd+0x10/0x10 [ 2022.181145] ? smpboot_thread_fn+0x371/0x9d0 [ 2022.181166] run_ksoftirqd+0x2e/0x60 [ 2022.181187] smpboot_thread_fn+0x41d/0x9d0 [ 2022.181209] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2022.181232] kthread+0x3c8/0x740 [ 2022.181247] ? __pfx_kthread+0x10/0x10 [ 2022.181262] ? ret_from_fork+0x23/0x470 [ 2022.181286] ? lock_release+0xc8/0x290 [ 2022.181305] ? __pfx_kthread+0x10/0x10 [ 2022.181321] ret_from_fork+0x38b/0x470 [ 2022.181341] ? __pfx_kthread+0x10/0x10 [ 2022.181356] ret_from_fork_asm+0x1a/0x30 [ 2022.181382] [ 2022.212333] Mem-Info: [ 2022.212535] active_anon:2601 inactive_anon:256368 isolated_anon:0 [ 2022.212535] active_file:109 inactive_file:3475 isolated_file:64 [ 2022.212535] unevictable:0 dirty:1 writeback:0 [ 2022.212535] slab_reclaimable:3924 slab_unreclaimable:56836 [ 2022.212535] mapped:69643 shmem:109 pagetables:6978 [ 2022.212535] sec_pagetables:0 bounce:0 [ 2022.212535] kernel_misc_reclaimable:0 [ 2022.212535] free:2756 free_pcp:125 free_cma:0 [ 2022.215480] Node 0 active_anon:10404kB inactive_anon:1025472kB active_file:436kB inactive_file:14028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278572kB dirty:4kB writeback:0kB shmem:436kB kernel_stack:9344kB pagetables:27912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2022.217526] Node 0 DMA free:6428kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8300kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.219934] lowmem_reserve[]: 0 1600 1600 1600 [ 2022.220507] Node 0 DMA32 free:4840kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:10240KB free_highatomic:0KB active_anon:10400kB inactive_anon:1017172kB active_file:436kB inactive_file:14028kB unevictable:0kB writepending:4kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 2022.223565] lowmem_reserve[]: 0 0 0 0 [ 2022.223910] Node 0 DMA: 12*4kB (M) 4*8kB (M) 9*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6432kB [ 2022.225221] Node 0 DMA32: 366*4kB (UM) 258*8kB (UM) 79*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4792kB [ 2022.226290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2022.226970] 3722 total pagecache pages [ 2022.227277] 0 pages in swap cache [ 2022.227551] Free swap = 0kB [ 2022.227814] Total swap = 0kB [ 2022.228058] 524158 pages RAM [ 2022.228324] 0 pages HighMem/MovableOnly [ 2022.228653] 110572 pages reserved [ 2022.228930] slab_out_of_memory: 12 callbacks suppressed [ 2022.228938] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2022.230134] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2022.230869] node 0: slabs: 599, objs: 7498, free: 0 [ 2033.645708] systemd: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2033.645966] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2033.646682] CPU: 1 UID: 0 PID: 1 Comm: systemd Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2033.646701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.646711] Call Trace: [ 2033.646716] [ 2033.646722] dump_stack_lvl+0xfa/0x120 [ 2033.646745] warn_alloc+0x211/0x360 [ 2033.646762] ? __pfx_warn_alloc+0x10/0x10 [ 2033.646788] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2033.646805] ? __lock_acquire+0x694/0x1b70 [ 2033.646825] ? __lock_acquire+0x694/0x1b70 [ 2033.646842] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2033.646861] ? lock_acquire+0x15e/0x2f0 [ 2033.646877] ? __is_insn_slot_addr+0x2e/0x290 [ 2033.646894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2033.646914] ? policy_nodemask+0xeb/0x4e0 [ 2033.646931] alloc_pages_mpol+0xed/0x340 [ 2033.646946] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2033.646959] ? lock_is_held_type+0x9e/0x120 [ 2033.646980] new_slab+0x257/0x330 [ 2033.646995] ___slab_alloc+0x9f4/0x11f0 [ 2033.647008] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2033.647030] ? kasan_save_stack+0x34/0x50 [ 2033.647052] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2033.647065] __slab_alloc.constprop.0+0x2c/0x60 [ 2033.647078] __kmalloc_noprof+0x51c/0x760 [ 2033.647093] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2033.647110] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2033.647123] ieee802_11_parse_elems_full+0x187/0x3190 [ 2033.647145] ? find_held_lock+0x2b/0x80 [ 2033.647165] ? paint_ptr+0x36/0x90 [ 2033.647181] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2033.647196] ? do_raw_spin_unlock+0x53/0x220 [ 2033.647219] ? mark_held_locks+0x49/0x80 [ 2033.647236] ? __asan_memcpy+0x3d/0x60 [ 2033.647258] ieee80211_inform_bss+0xf3/0x10b0 [ 2033.647283] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2033.647308] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 2033.647328] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2033.647351] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2033.647372] ? lock_release+0xc8/0x290 [ 2033.647388] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2033.647406] ? do_raw_spin_unlock+0x53/0x220 [ 2033.647436] ? lock_release+0xc8/0x290 [ 2033.647457] cfg80211_inform_bss_data+0x215/0x34f0 [ 2033.647478] ? mark_held_locks+0x49/0x80 [ 2033.647495] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2033.647517] ? __local_bh_enable_ip+0xa1/0x110 [ 2033.647530] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2033.647553] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2033.647577] ? stack_trace_save+0x8e/0xc0 [ 2033.647596] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 2033.647633] ? __lock_acquire+0x694/0x1b70 [ 2033.647649] ? lock_is_held_type+0x42/0x120 [ 2033.647671] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2033.647693] ieee80211_bss_info_update+0x2f5/0xa90 [ 2033.647717] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2033.647745] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 2033.647762] ieee80211_scan_rx+0x4d6/0xb20 [ 2033.647783] ? ieee80211_clean_skb+0x18f/0x6f0 [ 2033.647807] ieee80211_rx_list+0x1e1a/0x29a0 [ 2033.647827] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 2033.647840] ? __lock_acquire+0xc65/0x1b70 [ 2033.647862] ? do_raw_spin_lock+0x123/0x260 [ 2033.647884] ieee80211_rx_napi+0xdb/0x3c0 [ 2033.647897] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 2033.647912] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2033.647937] ieee80211_handle_queued_frames+0xd9/0x130 [ 2033.647961] tasklet_action_common+0x235/0x3b0 [ 2033.647975] ? workqueue_softirq_action+0x1a/0x170 [ 2033.647997] handle_softirqs+0x1b1/0x770 [ 2033.648023] __irq_exit_rcu+0xc4/0x100 [ 2033.648044] irq_exit_rcu+0x9/0x20 [ 2033.648055] sysvec_apic_timer_interrupt+0x70/0x80 [ 2033.648068] [ 2033.648073] [ 2033.648078] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2033.648094] RIP: 0010:_raw_spin_unlock_irq+0x2b/0x40 [ 2033.648118] Code: 0f 1e fa 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 ea 48 90 fc 48 89 ef e8 22 94 90 fc e8 5d a8 ba fc fb 65 ff 0d 75 83 e4 02 <74> 06 5d e9 7d 23 00 00 0f 1f 44 00 00 5d e9 72 23 00 00 66 90 90 [ 2033.648131] RSP: 0018:ffff88800954eb40 EFLAGS: 00000286 [ 2033.648142] RAX: 0000000000ea66ed RBX: ffff8880094bef40 RCX: 0000000000000080 [ 2033.648152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84c19cb3 [ 2033.648160] RBP: ffff8880094bef90 R08: 0000000000000001 R09: 0000000000000001 [ 2033.648169] R10: ffffffff86644e57 R11: 0000000000000001 R12: 0000000000000000 [ 2033.648178] R13: 00000000000015cc R14: ffff8880094bef90 R15: 0000000000000001 [ 2033.648193] ? _raw_spin_unlock_irq+0x23/0x40 [ 2033.648216] lru_note_cost_unlock_irq+0x154/0x390 [ 2033.648235] shrink_lruvec+0x1043/0x2730 [ 2033.648271] ? __pfx_shrink_lruvec+0x10/0x10 [ 2033.648287] ? lock_acquire+0x15e/0x2f0 [ 2033.648305] ? __lock_acquire+0x694/0x1b70 [ 2033.648322] ? __lock_acquire+0x652/0x1b70 [ 2033.648343] ? lock_acquire+0x15e/0x2f0 [ 2033.648358] ? percpu_ref_put_many.constprop.0+0x1b/0x1b0 [ 2033.648382] ? lock_release+0xc8/0x290 [ 2033.648402] ? page_counter_calculate_protection+0x2f4/0x6e0 [ 2033.648422] shrink_node+0xa66/0x26a0 [ 2033.648446] ? __pfx_shrink_node+0x10/0x10 [ 2033.648461] ? vmpressure+0x2f2/0x380 [ 2033.648482] do_try_to_free_pages+0x312/0x1770 [ 2033.648508] try_to_free_pages+0x28c/0x600 [ 2033.648525] ? __pfx_try_to_free_pages+0x10/0x10 [ 2033.648547] ? find_held_lock+0x2b/0x80 [ 2033.648567] ? fs_reclaim_acquire+0xae/0x150 [ 2033.648585] ? lock_release+0xc8/0x290 [ 2033.648603] __alloc_frozen_pages_noprof+0x8cd/0x1f20 [ 2033.648626] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2033.648645] ? find_held_lock+0x2b/0x80 [ 2033.648666] ? vmpressure+0x2a0/0x380 [ 2033.648683] ? lock_release+0xc8/0x290 [ 2033.648700] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2033.648719] ? policy_nodemask+0xeb/0x4e0 [ 2033.648735] alloc_pages_mpol+0xed/0x340 [ 2033.648750] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2033.648771] new_slab+0x23b/0x330 [ 2033.648784] ___slab_alloc+0x9f4/0x11f0 [ 2033.648798] ? mempool_alloc_noprof+0x158/0x370 [ 2033.648819] ? lock_is_held_type+0x9e/0x120 [ 2033.648837] ? mempool_alloc_noprof+0x158/0x370 [ 2033.648854] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2033.648867] __slab_alloc.constprop.0+0x2c/0x60 [ 2033.648882] kmem_cache_alloc_noprof+0x479/0x680 [ 2033.648903] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 2033.648921] ? mempool_alloc_noprof+0x158/0x370 [ 2033.648938] mempool_alloc_noprof+0x158/0x370 [ 2033.648959] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 2033.648978] ? ext4_map_blocks+0x1e0/0x14a0 [ 2033.648999] ? xa_load+0x148/0x2c0 [ 2033.649020] bio_alloc_bioset+0x415/0x8d0 [ 2033.649042] ? lock_is_held_type+0x9e/0x120 [ 2033.649057] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 2033.649078] ? find_held_lock+0x2b/0x80 [ 2033.649102] ext4_mpage_readpages+0xe0d/0x1210 [ 2033.649128] ? __pfx_ext4_mpage_readpages+0x10/0x10 [ 2033.649147] ? policy_nodemask+0xeb/0x4e0 [ 2033.649166] ext4_readahead+0x106/0x140 [ 2033.649181] ? __pfx_ext4_readahead+0x10/0x10 [ 2033.649197] read_pages+0x196/0xb10 [ 2033.649221] ? __pfx_read_pages+0x10/0x10 [ 2033.649245] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2033.649265] page_cache_ra_unbounded+0x3e6/0x870 [ 2033.649292] page_cache_ra_order+0x41f/0x510 [ 2033.649316] filemap_fault+0x1831/0x2ca0 [ 2033.649336] ? __pfx_filemap_fault+0x10/0x10 [ 2033.649359] __do_fault+0x10d/0x480 [ 2033.649380] __handle_mm_fault+0x11c0/0x3270 [ 2033.649394] ? lock_vma_under_rcu+0x117/0x530 [ 2033.649413] ? __pfx___handle_mm_fault+0x10/0x10 [ 2033.649428] ? lock_vma_under_rcu+0x174/0x530 [ 2033.649457] handle_mm_fault+0x2c3/0x9b0 [ 2033.649471] ? access_error+0x17d/0x380 [ 2033.649491] do_user_addr_fault+0x501/0x12b0 [ 2033.649512] exc_page_fault+0xb0/0x180 [ 2033.649526] asm_exc_page_fault+0x26/0x30 [ 2033.649539] RIP: 0033:0x7f82ee3b1c63 [ 2033.649557] Code: Unable to access opcode bytes at 0x7f82ee3b1c39. [ 2033.649564] RSP: 002b:00007ffd19cd10f8 EFLAGS: 00010293 [ 2033.649574] RAX: 0000000000000002 RBX: 000055b19128c680 RCX: 000055b1909556e0 [ 2033.649583] RDX: 00007f82ee42f620 RSI: 0000000000000003 RDI: 000055b190955b70 [ 2033.649592] RBP: 000055b19128c680 R08: 000055b1911b5fb8 R09: 000055b19128c6b8 [ 2033.649600] R10: 0000000000000010 R11: 0000000000000000 R12: 00000000793122c0 [ 2033.649609] R13: 000000000000000c R14: 00007ffd19cd1190 R15: 000000000000000c [ 2033.649626] [ 2033.649651] Mem-Info: [ 2033.649702] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2033.650004] active_anon:2601 inactive_anon:256368 isolated_anon:0 [ 2033.650004] active_file:11 inactive_file:3096 isolated_file:64 [ 2033.650004] unevictable:0 dirty:0 writeback:0 [ 2033.650004] slab_reclaimable:3924 slab_unreclaimable:57272 [ 2033.650004] mapped:69656 shmem:109 pagetables:6978 [ 2033.650004] sec_pagetables:0 bounce:0 [ 2033.650004] kernel_misc_reclaimable:0 [ 2033.650004] free:1641 free_pcp:1262 free_cma:0 [ 2033.650404] node 0: slabs: 330, objs: 3960, free: 0 [ 2033.650733] Node 0 active_anon:10404kB inactive_anon:1025472kB active_file:44kB inactive_file:12384kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:278624kB dirty:0kB writeback:0kB shmem:436kB kernel_stack:9344kB pagetables:27912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2033.651069] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2033.651468] Node 0 [ 2033.651790] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2033.652124] DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8300kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2033.652529] node 0: slabs: 330, objs: 3960, free: 0 [ 2033.652856] lowmem_reserve[]: [ 2033.653168] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2033.653507] 0 [ 2033.653852] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2033.654115] 1600 [ 2033.654422] node 0: slabs: 330, objs: 3960, free: 0 [ 2033.654828] 1600 [ 2033.655150] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2033.655498] 1600 [ 2033.655890] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2033.656195] [ 2033.656628] node 0: slabs: 330, objs: 3960, free: 0 [ 2033.657021] Node 0 [ 2033.657680] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2033.657727] DMA32 free:144kB boost:2048kB min:7120kB low:8744kB high:10368kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:10400kB inactive_anon:1017172kB active_file:44kB inactive_file:12492kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:5048kB local_pcp:1956kB free_cma:0kB [ 2033.657991] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2033.658399] lowmem_reserve[]: [ 2033.658758] node 0: slabs: 674, objs: 6416, free: 0 [ 2033.659059] 0 [ 2033.659422] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2033.659708] 0 [ 2033.660093] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2033.660538] 0 [ 2033.661004] node 0: slabs: 674, objs: 6416, free: 0 [ 2033.661403] 0 [ 2033.661779] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2033.662158] [ 2033.662499] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2033.662803] Node 0 [ 2033.663268] node 0: slabs: 674, objs: 6416, free: 0 [ 2033.663564] DMA: 8*4kB [ 2033.664160] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2033.664409] (UM) 5*8kB [ 2033.664919] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2033.665299] (UM) 9*16kB [ 2033.665745] node 0: slabs: 674, objs: 6416, free: 0 [ 2033.666107] (UME) 4*32kB [ 2033.666649] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2033.666864] (UME) [ 2033.667348] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2033.667722] 5*64kB (UME) [ 2033.668158] node 0: slabs: 674, objs: 6416, free: 0 [ 2033.668538] 3*128kB [ 2033.668964] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2033.669236] (UME) [ 2033.669579] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2033.669945] 1*256kB (E) 2*512kB [ 2033.670329] node 0: slabs: 674, objs: 6416, free: 0 [ 2033.670661] (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6424kB [ 2033.738321] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2033.739222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2033.739895] 3305 total pagecache pages [ 2033.740201] 0 pages in swap cache [ 2033.740483] Free swap = 0kB [ 2033.740744] Total swap = 0kB [ 2033.740988] 524158 pages RAM [ 2033.741230] 0 pages HighMem/MovableOnly [ 2033.741539] 110572 pages reserved [ 2042.555540] slab_out_of_memory: 48 callbacks suppressed [ 2042.555560] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.556754] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.557424] node 0: slabs: 577, objs: 6152, free: 0 [ 2042.557874] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.558597] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.559278] node 0: slabs: 577, objs: 6152, free: 0 [ 2042.559722] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.560454] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.561185] node 0: slabs: 577, objs: 6152, free: 0 [ 2042.561637] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.562359] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.563043] node 0: slabs: 577, objs: 6152, free: 0 [ 2042.563492] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.564251] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.564952] node 0: slabs: 577, objs: 6152, free: 0 [ 2042.568967] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.569738] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.570452] node 0: slabs: 579, objs: 6156, free: 0 [ 2042.570912] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.571707] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.572419] node 0: slabs: 579, objs: 6156, free: 0 [ 2042.574673] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.575481] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.576234] node 0: slabs: 579, objs: 6156, free: 0 [ 2042.576728] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.577499] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.578237] node 0: slabs: 579, objs: 6156, free: 0 [ 2042.578720] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2042.579489] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2042.580231] node 0: slabs: 579, objs: 6156, free: 0 [ 2050.644741] warn_alloc: 68 callbacks suppressed [ 2050.644762] kswapd0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2050.644941] slab_out_of_memory: 1 callbacks suppressed [ 2050.644973] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.645213] ,cpuset= [ 2050.646664] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.647310] / [ 2050.648724] node 0: slabs: 724, objs: 6950, free: 0 [ 2050.649003] ,mems_allowed=0 [ 2050.650400] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.650431] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.650847] [ 2050.650866] CPU: 0 UID: 0 PID: 51 Comm: kswapd0 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2050.650883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2050.650892] Call Trace: [ 2050.650898] [ 2050.650903] dump_stack_lvl+0xfa/0x120 [ 2050.650925] warn_alloc+0x211/0x360 [ 2050.650942] ? __pfx_warn_alloc+0x10/0x10 [ 2050.650966] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2050.650982] ? __lock_acquire+0x694/0x1b70 [ 2050.651001] ? lock_acquire+0x15e/0x2f0 [ 2050.651016] ? unwind_next_frame+0xb9/0x2540 [ 2050.651036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2050.651051] ? lock_acquire+0x15e/0x2f0 [ 2050.651065] ? unwind_next_frame+0xb9/0x2540 [ 2050.651086] ? unwind_next_frame+0x3b2/0x2540 [ 2050.651105] ? lock_release+0xc8/0x290 [ 2050.651123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2050.651142] ? policy_nodemask+0xeb/0x4e0 [ 2050.651158] alloc_pages_mpol+0xed/0x340 [ 2050.651173] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2050.651185] ? lock_is_held_type+0x9e/0x120 [ 2050.651204] new_slab+0x257/0x330 [ 2050.651218] ___slab_alloc+0x9f4/0x11f0 [ 2050.651231] ? __alloc_skb+0x2ab/0x370 [ 2050.651255] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2050.651267] __slab_alloc.constprop.0+0x2c/0x60 [ 2050.651279] kmem_cache_alloc_node_noprof+0x455/0x6a0 [ 2050.651296] ? __alloc_skb+0x2ab/0x370 [ 2050.651312] ? __alloc_skb+0x2ab/0x370 [ 2050.651324] __alloc_skb+0x2ab/0x370 [ 2050.651338] ? __pfx___alloc_skb+0x10/0x10 [ 2050.651353] ? do_raw_spin_lock+0x123/0x260 [ 2050.651371] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2050.651391] skb_copy+0x1d5/0x3b0 [ 2050.651403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2050.651421] mac80211_hwsim_tx_frame_no_nl.isra.0+0xafa/0x1320 [ 2050.651445] ? lock_acquire+0x15e/0x2f0 [ 2050.651460] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 2050.651480] ? mark_held_locks+0x49/0x80 [ 2050.651497] ? read_tsc+0x9/0x20 [ 2050.651514] ? mac80211_hwsim_monitor_rx+0x1de/0x850 [ 2050.651531] mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 2050.651550] mac80211_hwsim_beacon_tx+0x53f/0x940 [ 2050.651573] __iterate_interfaces+0x2e0/0x650 [ 2050.651590] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2050.651613] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2050.651630] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 2050.651649] mac80211_hwsim_beacon+0x105/0x1b0 [ 2050.651661] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2050.651675] __hrtimer_run_queues+0x1ee/0xac0 [ 2050.651703] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2050.651722] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 2050.651746] hrtimer_run_softirq+0x14c/0x310 [ 2050.651760] handle_softirqs+0x1b1/0x770 [ 2050.651784] __irq_exit_rcu+0xc4/0x100 [ 2050.651804] irq_exit_rcu+0x9/0x20 [ 2050.651814] sysvec_apic_timer_interrupt+0x70/0x80 [ 2050.651827] [ 2050.651831] [ 2050.651836] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2050.651851] RIP: 0010:_raw_spin_unlock_irq+0x2b/0x40 [ 2050.651873] Code: 0f 1e fa 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 ea 48 90 fc 48 89 ef e8 22 94 90 fc e8 5d a8 ba fc fb 65 ff 0d 75 83 e4 02 <74> 06 5d e9 7d 23 00 00 0f 1f 44 00 00 5d e9 72 23 00 00 66 90 90 [ 2050.651886] RSP: 0018:ffff88800b697760 EFLAGS: 00000286 [ 2050.651896] RAX: 0000000003888301 RBX: 0000000000000000 RCX: 0000000000000040 [ 2050.651905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84c19cb3 [ 2050.651913] RBP: ffff88801678dc10 R08: 0000000000000001 R09: 0000000000000001 [ 2050.651921] R10: ffffffff86644e57 R11: 0000000000000001 R12: 000000000000001d [ 2050.651929] R13: ffff88801678dc10 R14: 0000000000000020 R15: dffffc0000000000 [ 2050.651944] ? _raw_spin_unlock_irq+0x23/0x40 [ 2050.651966] shrink_lruvec+0xd8b/0x2730 [ 2050.651989] ? __pfx_shrink_lruvec+0x10/0x10 [ 2050.652004] ? lock_acquire+0x15e/0x2f0 [ 2050.652029] ? lock_acquire+0x15e/0x2f0 [ 2050.652043] ? percpu_ref_put_many.constprop.0+0x1b/0x1b0 [ 2050.652066] ? lock_release+0xc8/0x290 [ 2050.652085] ? page_counter_calculate_protection+0x2f4/0x6e0 [ 2050.652104] shrink_node+0xa66/0x26a0 [ 2050.652127] ? __pfx_shrink_node+0x10/0x10 [ 2050.652146] balance_pgdat+0x8cb/0x12f0 [ 2050.652163] ? __pfx_balance_pgdat+0x10/0x10 [ 2050.652185] ? pgdat_balanced+0x41c/0x4c0 [ 2050.652205] kswapd+0x457/0xa60 [ 2050.652222] ? __pfx_kswapd+0x10/0x10 [ 2050.652234] ? lock_release+0xc8/0x290 [ 2050.652250] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2050.652268] ? __kthread_parkme+0x1a7/0x250 [ 2050.652288] ? __pfx_kswapd+0x10/0x10 [ 2050.652303] kthread+0x3c8/0x740 [ 2050.652317] ? __pfx_kthread+0x10/0x10 [ 2050.652332] ? lock_release+0xc8/0x290 [ 2050.652347] ? __pfx_kthread+0x10/0x10 [ 2050.652361] ret_from_fork+0x38b/0x470 [ 2050.652380] ? __pfx_kthread+0x10/0x10 [ 2050.652394] ret_from_fork_asm+0x1a/0x30 [ 2050.652419] [ 2050.652442] Mem-Info: [ 2050.652675] node 0: slabs: 724, objs: 6950, free: 0 [ 2050.653372] active_anon:2601 inactive_anon:256372 isolated_anon:0 [ 2050.653372] active_file:37 inactive_file:2966 isolated_file:92 [ 2050.653372] unevictable:0 dirty:0 writeback:0 [ 2050.653372] slab_reclaimable:3927 slab_unreclaimable:57365 [ 2050.653372] mapped:69657 shmem:109 pagetables:6978 [ 2050.653372] sec_pagetables:0 bounce:0 [ 2050.653372] kernel_misc_reclaimable:0 [ 2050.653372] free:2017 free_pcp:896 free_cma:0 [ 2050.653708] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.654351] Node 0 active_anon:10404kB inactive_anon:1025488kB active_file:148kB inactive_file:11864kB unevictable:0kB isolated(anon):0kB isolated(file):368kB mapped:278628kB dirty:0kB writeback:0kB shmem:436kB kernel_stack:9344kB pagetables:27912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2050.655569] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.655776] Node 0 DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8300kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 2050.656104] node 0: slabs: 724, objs: 6950, free: 0 [ 2050.656406] lowmem_reserve[]: 0 [ 2050.658683] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.659096] 1600 1600 [ 2050.659694] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.660021] 1600 [ 2050.660692] node 0: slabs: 724, objs: 6950, free: 0 [ 2050.660985] Node 0 DMA32 free:1648kB boost:2048kB min:7120kB low:8744kB high:10368kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10400kB inactive_anon:1017188kB active_file:148kB inactive_file:11992kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3564kB local_pcp:472kB free_cma:0kB [ 2050.661810] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.662046] lowmem_reserve[]: 0 [ 2050.662651] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.662999] 0 0 [ 2050.663598] node 0: slabs: 724, objs: 6950, free: 0 [ 2050.663886] 0 [ 2050.708533] Node 0 DMA: 13*4kB (UM) 4*8kB (M) 8*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6420kB [ 2050.709860] Node 0 DMA32: 2*4kB (M) 38*8kB (UM) 111*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2088kB [ 2050.710911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2050.711574] 3194 total pagecache pages [ 2050.711898] 0 pages in swap cache [ 2050.712175] Free swap = 0kB [ 2050.712418] Total swap = 0kB [ 2050.712684] 524158 pages RAM [ 2050.712929] 0 pages HighMem/MovableOnly [ 2050.713241] 110572 pages reserved [ 2050.713519] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2050.714189] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2050.714961] node 0: slabs: 357, objs: 4284, free: 0 [ 2050.716753] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.717542] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.718284] node 0: slabs: 724, objs: 6950, free: 0 [ 2050.718797] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2050.719576] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2050.720321] node 0: slabs: 724, objs: 6950, free: 0 [ 2057.919889] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2057.921404] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2057.922742] node 0: slabs: 739, objs: 7358, free: 0 [ 2057.923582] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2057.925189] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2057.926660] node 0: slabs: 739, objs: 7358, free: 0 [ 2057.927559] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2057.929137] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2057.930586] node 0: slabs: 739, objs: 7358, free: 0 [ 2066.420350] warn_alloc: 10 callbacks suppressed [ 2066.420376] kworker/u9:5: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2066.423120] CPU: 0 UID: 0 PID: 14484 Comm: kworker/u9:5 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2066.423151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2066.423168] Workqueue: events_unbound cfg80211_wiphy_work [ 2066.423207] Call Trace: [ 2066.423216] [ 2066.423226] dump_stack_lvl+0xfa/0x120 [ 2066.423257] warn_alloc+0x211/0x360 [ 2066.423285] ? __pfx_warn_alloc+0x10/0x10 [ 2066.423334] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2066.423373] ? __lock_acquire+0x694/0x1b70 [ 2066.423402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2066.423438] ? lock_acquire+0x15e/0x2f0 [ 2066.423465] ? unwind_next_frame+0xb9/0x2540 [ 2066.423507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2066.423541] ? policy_nodemask+0xeb/0x4e0 [ 2066.423571] alloc_pages_mpol+0xed/0x340 [ 2066.423597] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2066.423628] ? lock_is_held_type+0x9e/0x120 [ 2066.423663] new_slab+0x257/0x330 [ 2066.423688] ___slab_alloc+0x9f4/0x11f0 [ 2066.423713] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2066.423743] ? arch_stack_walk+0x86/0xf0 [ 2066.423779] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2066.423802] __slab_alloc.constprop.0+0x2c/0x60 [ 2066.423824] __kmalloc_noprof+0x51c/0x760 [ 2066.423846] ? register_lock_class+0x41/0x560 [ 2066.423876] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2066.423907] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2066.423931] ieee802_11_parse_elems_full+0x187/0x3190 [ 2066.423970] ? find_held_lock+0x2b/0x80 [ 2066.424005] ? paint_ptr+0x36/0x90 [ 2066.424031] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2066.424056] ? do_raw_spin_unlock+0x53/0x220 [ 2066.424097] ? mark_held_locks+0x49/0x80 [ 2066.424127] ? __asan_memcpy+0x3d/0x60 [ 2066.424164] ieee80211_inform_bss+0xf3/0x10b0 [ 2066.424206] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2066.424251] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 2066.424285] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2066.424323] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2066.424360] ? unwind_next_frame+0x3bc/0x2540 [ 2066.424394] ? ret_from_fork_asm+0x1a/0x30 [ 2066.424426] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2066.424457] ? kernel_text_address+0x11/0xc0 [ 2066.424508] ? stack_trace_save+0x8e/0xc0 [ 2066.424540] ? stack_depot_save_flags+0x2c/0xa20 [ 2066.424574] cfg80211_inform_bss_data+0x215/0x34f0 [ 2066.424603] ? kasan_save_track+0x14/0x30 [ 2066.424647] ? __kasan_kmalloc+0x7f/0x90 [ 2066.424682] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2066.424707] ? ieee80211_iface_work+0xd52/0x1220 [ 2066.424729] ? cfg80211_wiphy_work+0x245/0x480 [ 2066.424760] ? worker_thread+0x67e/0xe90 [ 2066.424786] ? kthread+0x3c8/0x740 [ 2066.424809] ? ret_from_fork+0x38b/0x470 [ 2066.424844] ? ret_from_fork_asm+0x1a/0x30 [ 2066.424884] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2066.424919] ? __lock_acquire+0x694/0x1b70 [ 2066.424949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2066.424982] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 2066.425030] ? __lock_acquire+0x694/0x1b70 [ 2066.425075] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2066.425115] ieee80211_bss_info_update+0x2f5/0xa90 [ 2066.425156] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2066.425202] ? find_held_lock+0x2b/0x80 [ 2066.425237] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 2066.425275] ? lock_release+0xc8/0x290 [ 2066.425308] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 2066.425361] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2066.425400] ? __lock_acquire+0xc65/0x1b70 [ 2066.425452] ? mark_held_locks+0x49/0x80 [ 2066.425491] ieee80211_iface_work+0xd52/0x1220 [ 2066.425522] cfg80211_wiphy_work+0x245/0x480 [ 2066.425560] process_one_work+0x8e1/0x19c0 [ 2066.425601] ? __pfx_process_one_work+0x10/0x10 [ 2066.425630] ? move_linked_works+0x172/0x270 [ 2066.425670] ? assign_work+0x196/0x240 [ 2066.425701] worker_thread+0x67e/0xe90 [ 2066.425730] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2066.425766] ? __pfx_worker_thread+0x10/0x10 [ 2066.425796] kthread+0x3c8/0x740 [ 2066.425821] ? __pfx_kthread+0x10/0x10 [ 2066.425845] ? ret_from_fork+0x23/0x470 [ 2066.425881] ? lock_release+0xc8/0x290 [ 2066.425910] ? __pfx_kthread+0x10/0x10 [ 2066.425937] ret_from_fork+0x38b/0x470 [ 2066.425971] ? __pfx_kthread+0x10/0x10 [ 2066.425997] ret_from_fork_asm+0x1a/0x30 [ 2066.426044] [ 2066.481918] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.482259] Mem-Info: [ 2066.482507] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.483146] active_anon:2601 inactive_anon:256373 isolated_anon:0 [ 2066.483146] active_file:49 inactive_file:3910 isolated_file:96 [ 2066.483146] unevictable:0 dirty:0 writeback:0 [ 2066.483146] slab_reclaimable:3919 slab_unreclaimable:56417 [ 2066.483146] mapped:69655 shmem:109 pagetables:6978 [ 2066.483146] sec_pagetables:0 bounce:0 [ 2066.483146] kernel_misc_reclaimable:0 [ 2066.483146] free:2050 free_pcp:864 free_cma:0 [ 2066.483421] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.484039] Node 0 active_anon:10404kB inactive_anon:1025492kB active_file:196kB inactive_file:15640kB unevictable:0kB isolated(anon):0kB isolated(file):384kB mapped:278620kB dirty:0kB writeback:0kB shmem:436kB kernel_stack:9344kB pagetables:27912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2066.499631] Node 0 DMA free:6404kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8300kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 2066.503961] lowmem_reserve[]: 0 1600 1600 1600 [ 2066.504760] Node 0 DMA32 free:1796kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:40KB active_anon:10400kB inactive_anon:1017192kB active_file:196kB inactive_file:15704kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3436kB local_pcp:3436kB free_cma:0kB [ 2066.509586] lowmem_reserve[]: 0 0 0 0 [ 2066.510250] Node 0 DMA: 7*4kB (M) 5*8kB (UM) 8*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6404kB [ 2066.512753] Node 0 DMA32: 0*4kB 2*8kB (UH) 107*16kB (UH) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1728kB [ 2066.514724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2066.515793] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.516037] 4169 total pagecache pages [ 2066.516760] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.516776] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.517357] 0 pages in swap cache [ 2066.518132] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.518896] Free swap = 0kB [ 2066.519165] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.520671] Total swap = 0kB [ 2066.520910] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.522316] 524158 pages RAM [ 2066.522586] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.523355] 0 pages HighMem/MovableOnly [ 2066.523585] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.525107] 110572 pages reserved [ 2066.525404] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.526834] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.527125] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.527897] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.528664] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.528678] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.530193] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.533644] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.534699] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.535374] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.537347] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.538930] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.539633] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.540364] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.541095] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.541109] node 0: slabs: 476, objs: 6370, free: 0 [ 2066.542044] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2066.544890] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2066.546322] node 0: slabs: 476, objs: 6370, free: 0 [ 2091.296985] warn_alloc: 30 callbacks suppressed [ 2091.297005] syz-fuzzer: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2091.298157] slab_out_of_memory: 21 callbacks suppressed [ 2091.298178] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.298599] CPU: 1 UID: 0 PID: 254 Comm: syz-fuzzer Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2091.298627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.298638] Call Trace: [ 2091.298646] [ 2091.298652] dump_stack_lvl+0xfa/0x120 [ 2091.298683] warn_alloc+0x211/0x360 [ 2091.298705] ? __pfx_warn_alloc+0x10/0x10 [ 2091.298739] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2091.298762] ? __lock_acquire+0x694/0x1b70 [ 2091.298789] ? __lock_acquire+0x694/0x1b70 [ 2091.298811] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2091.298837] ? lock_acquire+0x15e/0x2f0 [ 2091.298856] ? __is_insn_slot_addr+0x2e/0x290 [ 2091.298880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2091.298906] ? policy_nodemask+0xeb/0x4e0 [ 2091.298929] alloc_pages_mpol+0xed/0x340 [ 2091.298948] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2091.298966] ? lock_is_held_type+0x9e/0x120 [ 2091.298993] new_slab+0x257/0x330 [ 2091.299013] ___slab_alloc+0x9f4/0x11f0 [ 2091.299031] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2091.299052] ? kasan_save_stack+0x34/0x50 [ 2091.299083] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2091.299099] __slab_alloc.constprop.0+0x2c/0x60 [ 2091.299116] __kmalloc_noprof+0x51c/0x760 [ 2091.299135] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2091.299157] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2091.299174] ieee802_11_parse_elems_full+0x187/0x3190 [ 2091.299202] ? find_held_lock+0x2b/0x80 [ 2091.299231] ? paint_ptr+0x36/0x90 [ 2091.299250] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2091.299269] ? do_raw_spin_unlock+0x53/0x220 [ 2091.299300] ? mark_held_locks+0x49/0x80 [ 2091.299322] ? __asan_memcpy+0x3d/0x60 [ 2091.299350] ieee80211_inform_bss+0xf3/0x10b0 [ 2091.299383] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2091.299416] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 2091.299443] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2091.299472] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2091.299500] ? lock_release+0xc8/0x290 [ 2091.299521] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2091.299544] ? do_raw_spin_unlock+0x53/0x220 [ 2091.299584] ? lock_release+0xc8/0x290 [ 2091.299611] cfg80211_inform_bss_data+0x215/0x34f0 [ 2091.299639] ? mark_held_locks+0x49/0x80 [ 2091.299662] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2091.299690] ? __local_bh_enable_ip+0xa1/0x110 [ 2091.299709] ? ieee80211_rx_handlers+0xccc/0x9620 [ 2091.299739] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2091.299769] ? stack_trace_save+0x8e/0xc0 [ 2091.299795] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 2091.299839] ? __lock_acquire+0x694/0x1b70 [ 2091.299856] ? lock_is_held_type+0x42/0x120 [ 2091.299883] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2091.299914] ieee80211_bss_info_update+0x2f5/0xa90 [ 2091.299944] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2091.299982] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 2091.300005] ieee80211_scan_rx+0x4d6/0xb20 [ 2091.300032] ? ieee80211_clean_skb+0x18f/0x6f0 [ 2091.300064] ieee80211_rx_list+0x1e1a/0x29a0 [ 2091.300090] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 2091.300107] ? __lock_acquire+0xc65/0x1b70 [ 2091.300137] ? do_raw_spin_lock+0x123/0x260 [ 2091.300165] ieee80211_rx_napi+0xdb/0x3c0 [ 2091.300182] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 2091.300201] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2091.300235] ieee80211_handle_queued_frames+0xd9/0x130 [ 2091.300265] tasklet_action_common+0x235/0x3b0 [ 2091.300284] ? workqueue_softirq_action+0x1a/0x170 [ 2091.300315] handle_softirqs+0x1b1/0x770 [ 2091.300349] __irq_exit_rcu+0xc4/0x100 [ 2091.300376] irq_exit_rcu+0x9/0x20 [ 2091.300391] sysvec_apic_timer_interrupt+0x70/0x80 [ 2091.300409] [ 2091.300415] [ 2091.300422] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2091.300443] RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 [ 2091.300474] Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 96 48 90 fc 48 89 ef e8 ce 93 90 fc 80 e7 02 74 06 e8 04 a8 ba fc fb 65 ff 0d 1c 83 e4 02 <74> 07 5b 5d e9 23 23 00 00 0f 1f 44 00 00 5b 5d e9 17 23 00 00 0f [ 2091.300492] RSP: 0018:ffff888015e27508 EFLAGS: 00000282 [ 2091.300507] RAX: 00000000023f149d RBX: 0000000000000246 RCX: 0000000000000040 [ 2091.300519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84c19d0c [ 2091.300531] RBP: ffff88807ffdcf20 R08: 0000000000000001 R09: 0000000000000001 [ 2091.300542] R10: ffffffff86644e57 R11: 0000000000000001 R12: dffffc0000000000 [ 2091.300554] R13: 00000000ffffffff R14: 000000000000000b R15: ffff88807ffdcc00 [ 2091.300574] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2091.300606] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2091.300633] __rmqueue_pcplist+0x6ff/0x10f0 [ 2091.300668] get_page_from_freelist+0x4f4/0x2600 [ 2091.300689] ? should_fail_alloc_page+0xe8/0x110 [ 2091.300715] __alloc_frozen_pages_noprof+0x25e/0x1f20 [ 2091.300730] ? __lock_acquire+0x694/0x1b70 [ 2091.300746] ? lock_is_held_type+0x9e/0x120 [ 2091.300762] ? lock_is_held_type+0x9e/0x120 [ 2091.300777] ? find_held_lock+0x2b/0x80 [ 2091.300798] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2091.300813] ? lock_release+0xc8/0x290 [ 2091.300834] ? __lock_acquire+0xc65/0x1b70 [ 2091.300852] ? __lock_acquire+0x694/0x1b70 [ 2091.300867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2091.300887] ? policy_nodemask+0xeb/0x4e0 [ 2091.300916] alloc_pages_mpol+0xed/0x340 [ 2091.300931] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2091.300947] ? find_held_lock+0x2b/0x80 [ 2091.300968] ? xa_load+0x148/0x2c0 [ 2091.300989] folio_alloc_noprof+0x22/0x290 [ 2091.301007] filemap_alloc_folio_noprof+0x376/0x420 [ 2091.301029] ? __pfx_xa_load+0x10/0x10 [ 2091.301046] ? down_read+0x1b1/0x470 [ 2091.301063] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 2091.301085] ? css_rstat_updated+0x1b8/0x4d0 [ 2091.301109] page_cache_ra_unbounded+0x2b6/0x870 [ 2091.301138] page_cache_ra_order+0x41f/0x510 [ 2091.301161] filemap_fault+0x1831/0x2ca0 [ 2091.301182] ? __pfx_filemap_fault+0x10/0x10 [ 2091.301206] __do_fault+0x10d/0x480 [ 2091.301227] __handle_mm_fault+0x11c0/0x3270 [ 2091.301242] ? lock_vma_under_rcu+0x117/0x530 [ 2091.301266] ? __pfx___handle_mm_fault+0x10/0x10 [ 2091.301281] ? lock_vma_under_rcu+0x174/0x530 [ 2091.301319] handle_mm_fault+0x2c3/0x9b0 [ 2091.301337] ? access_error+0x17d/0x380 [ 2091.301363] do_user_addr_fault+0x501/0x12b0 [ 2091.301391] exc_page_fault+0xb0/0x180 [ 2091.301410] asm_exc_page_fault+0x26/0x30 [ 2091.301427] RIP: 0033:0x41f56a [ 2091.301439] Code: 31 ff eb 09 48 ff c7 d1 eb 48 83 c6 08 48 83 ff 08 0f 8d f3 00 00 00 48 39 ce 0f 83 ea 00 00 00 0f ba e3 00 73 de 4c 8d 04 16 <4d> 8b 00 4d 85 c0 74 d2 48 89 7c 24 40 4c 89 44 24 38 48 89 74 24 [ 2091.301456] RSP: 002b:000000c000041e20 EFLAGS: 00010287 [ 2091.301470] RAX: 00007fe3b88d2000 RBX: 0000000000000001 RCX: 0000000000040000 [ 2091.301481] RDX: 0000000001b3c940 RSI: 00000000000236d8 RDI: 0000000000000003 [ 2091.301490] RBP: 000000c000041e70 R08: 0000000001b60018 R09: 0000000000000044 [ 2091.301502] R10: 0000000001f21248 R11: 000000000000009e R12: 0000000000000018 [ 2091.301512] R13: 0000000000000000 R14: 0000000000e5dac1 R15: 0000000000000000 [ 2091.301530] [ 2091.301560] Mem-Info: [ 2091.301670] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.302028] active_anon:2600 inactive_anon:256257 isolated_anon:0 [ 2091.302028] active_file:338 inactive_file:3001 isolated_file:32 [ 2091.302028] unevictable:0 dirty:2 writeback:0 [ 2091.302028] slab_reclaimable:3922 slab_unreclaimable:56583 [ 2091.302028] mapped:69753 shmem:109 pagetables:6962 [ 2091.302028] sec_pagetables:0 bounce:0 [ 2091.302028] kernel_misc_reclaimable:0 [ 2091.302028] free:1587 free_pcp:187 free_cma:0 [ 2091.302317] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.302716] Node 0 active_anon:10400kB inactive_anon:1025028kB active_file:1352kB inactive_file:12004kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:279012kB dirty:8kB writeback:0kB shmem:436kB kernel_stack:9280kB pagetables:27848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2091.303175] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.303506] Node 0 [ 2091.303873] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.304390] DMA free:6408kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8296kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:48kB free_cma:0kB [ 2091.304708] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.305129] lowmem_reserve[]: [ 2091.305587] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.305947] 0 [ 2091.306246] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.306687] 1600 [ 2091.307025] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.307342] 1600 [ 2091.307716] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.308148] 1600 [ 2091.308486] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.308875] [ 2091.309257] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.309645] Node 0 [ 2091.310120] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.310543] DMA32 free:0kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10396kB inactive_anon:1016732kB active_file:1352kB inactive_file:11996kB unevictable:0kB writepending:8kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:688kB local_pcp:56kB free_cma:0kB [ 2091.310981] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.311342] lowmem_reserve[]: [ 2091.311646] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.312142] 0 [ 2091.312669] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.312899] 0 [ 2091.313201] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.313599] 0 [ 2091.314079] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.314494] 0 [ 2091.314918] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.315407] [ 2091.315732] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.316263] Node 0 [ 2091.316641] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.316986] DMA: [ 2091.318657] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.319002] 7*4kB [ 2091.319405] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.319736] (UM) [ 2091.320137] node 0: slabs: 538, objs: 5864, free: 0 [ 2091.320451] 2*8kB (U) 10*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6412kB [ 2091.433753] Node 0 DMA32: 999*4kB (UMH) 190*8kB (UMH) 29*16kB (UMH) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5980kB [ 2091.435863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2091.437199] 2102 total pagecache pages [ 2091.437832] 0 pages in swap cache [ 2091.438371] Free swap = 0kB [ 2091.438880] Total swap = 0kB [ 2091.439359] 524158 pages RAM [ 2091.439865] 0 pages HighMem/MovableOnly [ 2091.440475] 110572 pages reserved [ 2091.441054] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2091.442598] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2091.444062] node 0: slabs: 543, objs: 5902, free: 0 [ 2101.537311] warn_alloc: 8 callbacks suppressed [ 2101.537338] kworker/u10:1: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2101.538172] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.539925] CPU: 1 UID: 0 PID: 33725 Comm: kworker/u10:1 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2101.539956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2101.539971] Workqueue: events_unbound cfg80211_wiphy_work [ 2101.540009] Call Trace: [ 2101.540018] [ 2101.540028] dump_stack_lvl+0xfa/0x120 [ 2101.540057] warn_alloc+0x211/0x360 [ 2101.540083] ? __pfx_warn_alloc+0x10/0x10 [ 2101.540128] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2101.540166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2101.540188] ? lock_acquire+0x15e/0x2f0 [ 2101.540215] ? unwind_next_frame+0xb9/0x2540 [ 2101.540255] ? unwind_next_frame+0xb9/0x2540 [ 2101.540288] ? find_held_lock+0x2b/0x80 [ 2101.540326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2101.540359] ? policy_nodemask+0xeb/0x4e0 [ 2101.540386] alloc_pages_mpol+0xed/0x340 [ 2101.540411] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2101.540433] ? lock_is_held_type+0x9e/0x120 [ 2101.540465] new_slab+0x257/0x330 [ 2101.540489] ___slab_alloc+0x9f4/0x11f0 [ 2101.540512] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2101.540543] ? lock_acquire+0x15e/0x2f0 [ 2101.540568] ? unwind_next_frame+0xb9/0x2540 [ 2101.540613] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2101.540635] __slab_alloc.constprop.0+0x2c/0x60 [ 2101.540656] __kmalloc_noprof+0x51c/0x760 [ 2101.540680] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2101.540708] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2101.540730] ieee802_11_parse_elems_full+0x187/0x3190 [ 2101.540769] ? stack_trace_save+0x8e/0xc0 [ 2101.540798] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2101.540820] ? stack_depot_save_flags+0x2c/0xa20 [ 2101.540853] ? kasan_save_stack+0x34/0x50 [ 2101.540888] ? __lock_acquire+0x694/0x1b70 [ 2101.540919] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f70 [ 2101.540959] ? __lock_acquire+0xc65/0x1b70 [ 2101.540993] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2101.541041] ? __lock_acquire+0xc65/0x1b70 [ 2101.541090] ? mark_held_locks+0x49/0x80 [ 2101.541126] ieee80211_iface_work+0xd52/0x1220 [ 2101.541154] cfg80211_wiphy_work+0x245/0x480 [ 2101.541189] process_one_work+0x8e1/0x19c0 [ 2101.541229] ? __pfx_process_one_work+0x10/0x10 [ 2101.541255] ? move_linked_works+0x172/0x270 [ 2101.541293] ? assign_work+0x196/0x240 [ 2101.541322] worker_thread+0x67e/0xe90 [ 2101.541349] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2101.541382] ? __pfx_worker_thread+0x10/0x10 [ 2101.541410] kthread+0x3c8/0x740 [ 2101.541435] ? __pfx_kthread+0x10/0x10 [ 2101.541458] ? ret_from_fork+0x23/0x470 [ 2101.541492] ? lock_release+0xc8/0x290 [ 2101.541519] ? __pfx_kthread+0x10/0x10 [ 2101.541544] ret_from_fork+0x38b/0x470 [ 2101.541577] ? __pfx_kthread+0x10/0x10 [ 2101.541601] ret_from_fork_asm+0x1a/0x30 [ 2101.541645] [ 2101.541695] Mem-Info: [ 2101.542147] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.542947] active_anon:2600 inactive_anon:256259 isolated_anon:0 [ 2101.542947] active_file:34 inactive_file:2671 isolated_file:32 [ 2101.542947] unevictable:0 dirty:4 writeback:0 [ 2101.542947] slab_reclaimable:3914 slab_unreclaimable:57883 [ 2101.542947] mapped:69661 shmem:109 pagetables:6962 [ 2101.542947] sec_pagetables:0 bounce:0 [ 2101.542947] kernel_misc_reclaimable:0 [ 2101.542947] free:2024 free_pcp:884 free_cma:0 [ 2101.543147] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.543474] Node 0 active_anon:10400kB inactive_anon:1025036kB active_file:136kB inactive_file:10684kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:278644kB dirty:16kB writeback:0kB shmem:436kB kernel_stack:9280kB pagetables:27848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2101.543855] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.544328] Node 0 [ 2101.544676] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.545434] DMA free:6408kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 2101.545880] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.545949] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.546455] lowmem_reserve[]: [ 2101.546824] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.546841] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.547465] 0 [ 2101.547844] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.548522] 1600 [ 2101.548867] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.549459] 1600 [ 2101.549841] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.549908] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.550459] 1600 [ 2101.550752] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.550769] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.551325] [ 2101.551802] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.552319] Node 0 [ 2101.552680] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.553376] DMA32 free:1688kB boost:12288kB min:17360kB low:18984kB high:20608kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:10396kB inactive_anon:1016740kB active_file:136kB inactive_file:10684kB unevictable:0kB writepending:16kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3516kB local_pcp:500kB free_cma:0kB [ 2101.553755] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.553822] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.554346] lowmem_reserve[]: [ 2101.554780] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.554796] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.555534] 0 [ 2101.556069] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.556550] 0 [ 2101.557007] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.557030] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.557727] 0 [ 2101.558076] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.558665] 0 [ 2101.559072] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.559701] [ 2101.560134] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.560761] Node 0 [ 2101.561145] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2101.561750] DMA: [ 2101.562093] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2101.562724] 12*4kB [ 2101.563074] node 0: slabs: 919, objs: 7032, free: 0 [ 2101.563724] (UM) [ 2101.615798] in:imklog invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2101.616984] 5*8kB [ 2101.617413] CPU: 0 UID: 0 PID: 174 Comm: in:imklog Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2101.617431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2101.617441] Call Trace: [ 2101.617446] [ 2101.617452] dump_stack_lvl+0xfa/0x120 [ 2101.617476] dump_header+0x107/0x950 [ 2101.617501] oom_kill_process+0x278/0xa00 [ 2101.617520] ? oom_cpuset_eligible.isra.0+0x19b/0x2d0 [ 2101.617542] out_of_memory+0x138f/0x1690 [ 2101.617559] ? __pfx_out_of_memory+0x10/0x10 [ 2101.617575] __alloc_frozen_pages_noprof+0x1980/0x1f20 [ 2101.617598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2101.617625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2101.617645] ? policy_nodemask+0xeb/0x4e0 [ 2101.617661] alloc_pages_mpol+0xed/0x340 [ 2101.617675] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2101.617689] ? filemap_get_entry+0x1b1/0x3b0 [ 2101.617703] ? lock_release+0xc8/0x290 [ 2101.617722] folio_alloc_noprof+0x22/0x290 [ 2101.617739] filemap_alloc_folio_noprof+0x376/0x420 [ 2101.617759] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 2101.617778] ? down_read+0x1b1/0x470 [ 2101.617797] __filemap_get_folio+0x384/0x960 [ 2101.617810] ? page_cache_ra_order+0x41f/0x510 [ 2101.617831] filemap_fault+0x1889/0x2ca0 [ 2101.617849] ? __pfx_filemap_fault+0x10/0x10 [ 2101.617871] __do_fault+0x10d/0x480 [ 2101.617890] __handle_mm_fault+0x11c0/0x3270 [ 2101.617903] ? lock_vma_under_rcu+0x117/0x530 [ 2101.617920] ? __pfx___handle_mm_fault+0x10/0x10 [ 2101.617933] ? lock_vma_under_rcu+0x174/0x530 [ 2101.617960] handle_mm_fault+0x2c3/0x9b0 [ 2101.617973] ? access_error+0x17d/0x380 [ 2101.617991] do_user_addr_fault+0x501/0x12b0 [ 2101.618011] exc_page_fault+0xb0/0x180 [ 2101.618028] asm_exc_page_fault+0x26/0x30 [ 2101.618044] RIP: 0033:0x7f683419808c [ 2101.618062] Code: Unable to access opcode bytes at 0x7f6834198062. [ 2101.618069] RSP: 002b:00007f68337344d0 EFLAGS: 00010246 [ 2101.618079] RAX: 0000000000001f22 RBX: 0000000000000000 RCX: 00007f683419808c [ 2101.618087] RDX: 0000000000001fa0 RSI: 00007f6833734d00 RDI: 0000000000000005 [ 2101.618095] RBP: 000055585dc5a4c0 R08: 0000000000000000 R09: 0000000000000000 [ 2101.618103] R10: a3d70a3d70a3d70b R11: 0000000000000246 R12: 00007f6833734d00 [ 2101.618111] R13: 0000000000001fa0 R14: 00007f6833734d00 R15: 00007f6833736093 [ 2101.618128] [ 2101.618159] Mem-Info: [ 2101.619136] (M) [ 2101.619281] active_anon:2600 inactive_anon:256259 isolated_anon:0 [ 2101.619281] active_file:12 inactive_file:1509 isolated_file:0 [ 2101.619281] unevictable:0 dirty:4 writeback:0 [ 2101.619281] slab_reclaimable:3914 slab_unreclaimable:57883 [ 2101.619281] mapped:69661 shmem:109 pagetables:6962 [ 2101.619281] sec_pagetables:0 bounce:0 [ 2101.619281] kernel_misc_reclaimable:0 [ 2101.619281] free:4107 free_pcp:0 free_cma:0 [ 2101.620577] 9*16kB [ 2101.620984] Node 0 active_anon:10400kB inactive_anon:1025036kB active_file:48kB inactive_file:6036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278644kB dirty:16kB writeback:0kB shmem:436kB kernel_stack:9280kB pagetables:27848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2101.621279] (UME) [ 2101.622060] Node 0 DMA free:6424kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8296kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2101.622346] 3*32kB [ 2101.623064] lowmem_reserve[]: 0 1600 1600 1600 [ 2101.623089] Node 0 DMA32 free:10004kB boost:12288kB min:17360kB low:18984kB high:20608kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:10396kB inactive_anon:1016740kB active_file:48kB inactive_file:6036kB unevictable:0kB writepending:16kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2101.623379] (UME) [ 2101.623797] lowmem_reserve[]: 0 0 0 [ 2101.624137] 5*64kB [ 2101.624913] 0 [ 2101.624924] Node 0 DMA: [ 2101.625253] (UME) [ 2101.625974] 11*4kB (M) 6*8kB [ 2101.626319] 3*128kB [ 2101.626726] (UM) 10*16kB (UME) 3*32kB [ 2101.627050] (UME) [ 2101.627881] (UME) 5*64kB (UME) 3*128kB [ 2101.628219] 1*256kB [ 2101.628965] (UME) 1*256kB (E) 2*512kB [ 2101.630177] (E) [ 2101.630375] (ME) 2*1024kB [ 2101.630743] 2*512kB [ 2101.631034] (ME) [ 2101.631567] (ME) [ 2101.631903] 1*2048kB (U) 0*4096kB = 6428kB [ 2101.632666] 2*1024kB [ 2101.632982] Node 0 DMA32: [ 2101.633653] (ME) [ 2101.634040] 1033*4kB [ 2101.634848] 1*2048kB [ 2101.635237] (UM) [ 2101.635853] (U) [ 2101.636155] 326*8kB [ 2101.636839] 0*4096kB [ 2101.637178] (UM) 204*16kB [ 2101.637755] = 6408kB [ 2101.638072] (UM) 0*32kB [ 2101.639786] Node 0 DMA32: 970*4kB (UM) 326*8kB (UM) 189*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9512kB [ 2101.639936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2101.639956] 1674 total pagecache pages [ 2101.639966] 0 pages in swap cache [ 2101.639974] Free swap = 0kB [ 2101.639983] Total swap = 0kB [ 2101.639992] 524158 pages RAM [ 2101.640000] 0 pages HighMem/MovableOnly [ 2101.640009] 110572 pages reserved [ 2101.674335] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10004kB [ 2101.674972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2101.675652] 1254 total pagecache pages [ 2101.675954] 0 pages in swap cache [ 2101.676249] Free swap = 0kB [ 2101.676572] Total swap = 0kB [ 2101.676931] 524158 pages RAM [ 2101.677186] 0 pages HighMem/MovableOnly [ 2101.677493] 110572 pages reserved [ 2101.677782] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=174,uid=0 [ 2101.679688] Out of memory (oom_kill_allocating_task): Killed process 171 (rsyslogd) total-vm:220884kB, anon-rss:1280kB, file-rss:96kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2113.313412] warn_alloc: 16 callbacks suppressed [ 2113.313430] kworker/u10:1: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2113.313938] slab_out_of_memory: 7 callbacks suppressed [ 2113.313957] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2113.314852] CPU: 1 UID: 0 PID: 33725 Comm: kworker/u10:1 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2113.314870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.314879] Workqueue: events_unbound cfg80211_wiphy_work [ 2113.314904] Call Trace: [ 2113.314909] [ 2113.314914] dump_stack_lvl+0xfa/0x120 [ 2113.314933] warn_alloc+0x211/0x360 [ 2113.314949] ? __pfx_warn_alloc+0x10/0x10 [ 2113.314973] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2113.314993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2113.315005] ? lock_acquire+0x15e/0x2f0 [ 2113.315021] ? unwind_next_frame+0xb9/0x2540 [ 2113.315044] ? unwind_next_frame+0xb9/0x2540 [ 2113.315062] ? find_held_lock+0x2b/0x80 [ 2113.315083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2113.315102] ? policy_nodemask+0xeb/0x4e0 [ 2113.315118] alloc_pages_mpol+0xed/0x340 [ 2113.315131] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2113.315143] ? lock_is_held_type+0x9e/0x120 [ 2113.315162] new_slab+0x257/0x330 [ 2113.315176] ___slab_alloc+0x9f4/0x11f0 [ 2113.315187] ? lock_acquire+0x15e/0x2f0 [ 2113.315201] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2113.315217] ? lock_acquire+0x15e/0x2f0 [ 2113.315230] ? unwind_next_frame+0xb9/0x2540 [ 2113.315248] ? find_held_lock+0x2b/0x80 [ 2113.315266] ? unwind_next_frame+0x3b2/0x2540 [ 2113.315287] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2113.315299] __slab_alloc.constprop.0+0x2c/0x60 [ 2113.315310] __kmalloc_noprof+0x51c/0x760 [ 2113.315321] ? ret_from_fork_asm+0x1a/0x30 [ 2113.315338] ? ret_from_fork_asm+0x1a/0x30 [ 2113.315353] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2113.315369] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2113.315380] ieee802_11_parse_elems_full+0x187/0x3190 [ 2113.315395] ? ret_from_fork_asm+0x1a/0x30 [ 2113.315414] ? stack_trace_save+0x8e/0xc0 [ 2113.315431] ? stack_depot_save_flags+0x2c/0xa20 [ 2113.315446] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2113.315465] ? __lock_acquire+0x694/0x1b70 [ 2113.315484] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f70 [ 2113.315506] ? __lock_acquire+0xc65/0x1b70 [ 2113.315522] ? lock_release+0xc8/0x290 [ 2113.315536] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2113.315556] ? __lock_acquire+0xc65/0x1b70 [ 2113.315582] ? mark_held_locks+0x49/0x80 [ 2113.315602] ieee80211_iface_work+0xd52/0x1220 [ 2113.315621] cfg80211_wiphy_work+0x245/0x480 [ 2113.315640] process_one_work+0x8e1/0x19c0 [ 2113.315662] ? __pfx_process_one_work+0x10/0x10 [ 2113.315676] ? move_linked_works+0x172/0x270 [ 2113.315698] ? assign_work+0x196/0x240 [ 2113.315713] worker_thread+0x67e/0xe90 [ 2113.315728] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2113.315746] ? __pfx_worker_thread+0x10/0x10 [ 2113.315762] kthread+0x3c8/0x740 [ 2113.315775] ? __pfx_kthread+0x10/0x10 [ 2113.315788] ? ret_from_fork+0x23/0x470 [ 2113.315807] ? lock_release+0xc8/0x290 [ 2113.315822] ? __pfx_kthread+0x10/0x10 [ 2113.315835] ret_from_fork+0x38b/0x470 [ 2113.315853] ? __pfx_kthread+0x10/0x10 [ 2113.315866] ret_from_fork_asm+0x1a/0x30 [ 2113.315889] [ 2113.315909] Mem-Info: [ 2113.315971] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2113.316762] active_anon:2599 inactive_anon:256118 isolated_anon:0 [ 2113.316762] active_file:1703 inactive_file:1468 isolated_file:32 [ 2113.316762] unevictable:0 dirty:6 writeback:0 [ 2113.316762] slab_reclaimable:3914 slab_unreclaimable:56256 [ 2113.316762] mapped:69767 shmem:109 pagetables:6964 [ 2113.316762] sec_pagetables:0 bounce:0 [ 2113.316762] kernel_misc_reclaimable:0 [ 2113.316762] free:2057 free_pcp:2127 free_cma:0 [ 2113.317409] node 0: slabs: 290, objs: 3480, free: 0 [ 2113.317854] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.318068] Node 0 active_anon:10396kB inactive_anon:1024472kB active_file:6812kB inactive_file:5872kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:279068kB dirty:24kB writeback:0kB shmem:436kB kernel_stack:9280kB pagetables:27856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2113.318260] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.318553] Node 0 [ 2113.318856] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.319171] DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8308kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:16kB free_cma:0kB [ 2113.319632] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.319996] lowmem_reserve[]: [ 2113.320292] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.320627] 0 1600 [ 2113.320972] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.321269] 1600 [ 2113.321726] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.321983] 1600 [ 2113.322297] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.322657] [ 2113.322984] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.323240] Node 0 [ 2113.323590] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.323850] DMA32 free:1808kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:2048KB free_highatomic:184KB active_anon:10392kB inactive_anon:1016164kB active_file:6792kB inactive_file:5872kB unevictable:0kB writepending:24kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:8604kB local_pcp:8236kB free_cma:0kB [ 2113.324247] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.324535] lowmem_reserve[]: [ 2113.324891] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.325192] 0 [ 2113.325581] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.325901] 0 [ 2113.326264] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.326564] 0 [ 2113.326902] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.327232] 0 [ 2113.327703] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.328046] [ 2113.328442] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.328764] Node 0 [ 2113.329080] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.329434] DMA: [ 2113.329919] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.330184] 4*4kB [ 2113.330590] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.330915] (UM) [ 2113.331213] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.331643] 4*8kB [ 2113.332011] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.332259] (M) [ 2113.332630] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.332953] 8*16kB [ 2113.333282] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.333636] (UME) [ 2113.334042] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2113.334258] 5*32kB [ 2113.334561] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2113.334958] (UME) [ 2113.335299] node 0: slabs: 442, objs: 5714, free: 0 [ 2113.335547] 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6416kB [ 2113.368466] Node 0 DMA32: 13*4kB (UH) 376*8kB (UH) 154*16kB (UH) 5*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5684kB [ 2113.369501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2113.370136] 4373 total pagecache pages [ 2113.370423] 0 pages in swap cache [ 2113.370695] Free swap = 0kB [ 2113.370925] Total swap = 0kB [ 2113.371154] 524158 pages RAM [ 2113.371382] 0 pages HighMem/MovableOnly [ 2113.371689] 110572 pages reserved [ 2143.623765] warn_alloc: 21 callbacks suppressed [ 2143.623785] syz-fuzzer: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2143.625194] CPU: 0 UID: 0 PID: 254 Comm: syz-fuzzer Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2143.625213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.625222] Call Trace: [ 2143.625228] [ 2143.625233] dump_stack_lvl+0xfa/0x120 [ 2143.625256] warn_alloc+0x211/0x360 [ 2143.625273] ? __pfx_warn_alloc+0x10/0x10 [ 2143.625298] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2143.625315] ? __kernel_text_address+0xd/0x40 [ 2143.625333] ? unwind_get_return_address+0x59/0xa0 [ 2143.625360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2143.625380] ? stack_depot_save_flags+0x2c/0xa20 [ 2143.625399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2143.625420] ? policy_nodemask+0xeb/0x4e0 [ 2143.625437] alloc_pages_mpol+0xed/0x340 [ 2143.625451] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2143.625465] ? lock_is_held_type+0x9e/0x120 [ 2143.625485] new_slab+0x257/0x330 [ 2143.625506] ___slab_alloc+0x9f4/0x11f0 [ 2143.625520] ? __alloc_skb+0x2ab/0x370 [ 2143.625544] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2143.625557] __slab_alloc.constprop.0+0x2c/0x60 [ 2143.625570] kmem_cache_alloc_node_noprof+0x455/0x6a0 [ 2143.625588] ? __alloc_skb+0x2ab/0x370 [ 2143.625608] ? __alloc_skb+0x2ab/0x370 [ 2143.625621] __alloc_skb+0x2ab/0x370 [ 2143.625635] ? __pfx___alloc_skb+0x10/0x10 [ 2143.625651] ? lock_acquire+0x15e/0x2f0 [ 2143.625668] ? __ieee80211_beacon_get+0x3e/0x16e0 [ 2143.625690] __netdev_alloc_skb+0x1eb/0x7c0 [ 2143.625708] __ieee80211_beacon_get+0x3a6/0x16e0 [ 2143.625727] ? kmem_cache_free+0x2a4/0x540 [ 2143.625743] ? skb_release_data+0x6a2/0xa40 [ 2143.625760] ieee80211_beacon_get_tim+0xa5/0x280 [ 2143.625780] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 2143.625800] ? lock_is_held_type+0x9e/0x120 [ 2143.625817] mac80211_hwsim_beacon_tx+0x49e/0x940 [ 2143.625842] __iterate_interfaces+0x2e0/0x650 [ 2143.625859] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2143.625879] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2143.625898] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 2143.625918] mac80211_hwsim_beacon+0x105/0x1b0 [ 2143.625931] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2143.625945] __hrtimer_run_queues+0x1ee/0xac0 [ 2143.625975] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2143.625996] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 2143.626021] hrtimer_run_softirq+0x14c/0x310 [ 2143.626036] handle_softirqs+0x1b1/0x770 [ 2143.626062] __irq_exit_rcu+0xc4/0x100 [ 2143.626082] irq_exit_rcu+0x9/0x20 [ 2143.626093] sysvec_apic_timer_interrupt+0x70/0x80 [ 2143.626107] [ 2143.626112] [ 2143.626117] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2143.626133] RIP: 0010:_raw_spin_unlock_irq+0x2b/0x40 [ 2143.626156] Code: 0f 1e fa 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 ea 48 90 fc 48 89 ef e8 22 94 90 fc e8 5d a8 ba fc fb 65 ff 0d 75 83 e4 02 <74> 06 5d e9 7d 23 00 00 0f 1f 44 00 00 5d e9 72 23 00 00 66 90 90 [ 2143.626170] RSP: 0018:ffff888015e27090 EFLAGS: 00000286 [ 2143.626181] RAX: 00000000029c0213 RBX: ffff8880094bef40 RCX: 0000000000000080 [ 2143.626190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84c19cb3 [ 2143.626199] RBP: ffff8880094bef90 R08: 0000000000000001 R09: 0000000000000001 [ 2143.626208] R10: ffffffff86644e57 R11: 0000000000000001 R12: 0000000000000000 [ 2143.626217] R13: 00000000000023b4 R14: ffff8880094bef90 R15: 0000000000000001 [ 2143.626231] ? _raw_spin_unlock_irq+0x23/0x40 [ 2143.626255] lru_note_cost_unlock_irq+0x154/0x390 [ 2143.626274] shrink_lruvec+0x1043/0x2730 [ 2143.626298] ? __pfx_shrink_lruvec+0x10/0x10 [ 2143.626313] ? lock_acquire+0x15e/0x2f0 [ 2143.626340] ? lock_acquire+0x15e/0x2f0 [ 2143.626355] ? percpu_ref_put_many.constprop.0+0x1b/0x1b0 [ 2143.626380] ? lock_release+0xc8/0x290 [ 2143.626400] ? page_counter_calculate_protection+0x2f4/0x6e0 [ 2143.626420] shrink_node+0xa66/0x26a0 [ 2143.626443] ? __pfx_shrink_node+0x10/0x10 [ 2143.626458] ? vmpressure+0x2f2/0x380 [ 2143.626479] do_try_to_free_pages+0x312/0x1770 [ 2143.626505] try_to_free_pages+0x28c/0x600 [ 2143.626522] ? __pfx_try_to_free_pages+0x10/0x10 [ 2143.626543] ? find_held_lock+0x2b/0x80 [ 2143.626564] ? fs_reclaim_acquire+0xae/0x150 [ 2143.626582] ? lock_release+0xc8/0x290 [ 2143.626600] __alloc_frozen_pages_noprof+0x8cd/0x1f20 [ 2143.626615] ? lock_is_held_type+0x9e/0x120 [ 2143.626632] ? find_held_lock+0x2b/0x80 [ 2143.626654] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2143.626667] ? lock_release+0xc8/0x290 [ 2143.626688] ? __lock_acquire+0xc65/0x1b70 [ 2143.626706] ? __lock_acquire+0x694/0x1b70 [ 2143.626722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2143.626741] ? policy_nodemask+0xeb/0x4e0 [ 2143.626757] alloc_pages_mpol+0xed/0x340 [ 2143.626772] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2143.626787] ? find_held_lock+0x2b/0x80 [ 2143.626808] ? xa_load+0x148/0x2c0 [ 2143.626828] folio_alloc_noprof+0x22/0x290 [ 2143.626846] filemap_alloc_folio_noprof+0x376/0x420 [ 2143.626866] ? __pfx_xa_load+0x10/0x10 [ 2143.626885] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 2143.626907] ? css_rstat_updated+0x1b8/0x4d0 [ 2143.626929] page_cache_ra_unbounded+0x2b6/0x870 [ 2143.626957] page_cache_ra_order+0x41f/0x510 [ 2143.626980] filemap_fault+0x1831/0x2ca0 [ 2143.627001] ? __pfx_filemap_fault+0x10/0x10 [ 2143.627024] __do_fault+0x10d/0x480 [ 2143.627044] __handle_mm_fault+0x11c0/0x3270 [ 2143.627059] ? lock_vma_under_rcu+0x117/0x530 [ 2143.627078] ? __pfx___handle_mm_fault+0x10/0x10 [ 2143.627092] ? lock_vma_under_rcu+0x174/0x530 [ 2143.627121] handle_mm_fault+0x2c3/0x9b0 [ 2143.627134] ? access_error+0x17d/0x380 [ 2143.627153] do_user_addr_fault+0x501/0x12b0 [ 2143.627174] exc_page_fault+0xb0/0x180 [ 2143.627188] asm_exc_page_fault+0x26/0x30 [ 2143.627201] RIP: 0033:0x450260 [ 2143.627217] Code: Unable to access opcode bytes at 0x450236. [ 2143.627224] RSP: 002b:000000c000049880 EFLAGS: 00010206 [ 2143.627234] RAX: 0000000000f4f000 RBX: 0000000000ed0080 RCX: 00000000002bc83b [ 2143.627242] RDX: 000000000007ef80 RSI: 0000000000000001 RDI: 000000c000049828 [ 2143.627251] RBP: 000000c0000498b0 R08: 0000000000000002 R09: 0000000000f4f6f4 [ 2143.627260] R10: 0000000000ed0080 R11: 000000000023d1c7 R12: 0000000000000002 [ 2143.627269] R13: 0000000001240aa0 R14: 0000000000000000 R15: 0000000000000000 [ 2143.627286] [ 2143.671956] Mem-Info: [ 2143.672159] active_anon:2599 inactive_anon:256128 isolated_anon:0 [ 2143.672159] active_file:199 inactive_file:2603 isolated_file:64 [ 2143.672159] unevictable:0 dirty:20 writeback:0 [ 2143.672159] slab_reclaimable:3908 slab_unreclaimable:57922 [ 2143.672159] mapped:69674 shmem:109 pagetables:6964 [ 2143.672159] sec_pagetables:0 bounce:0 [ 2143.672159] kernel_misc_reclaimable:0 [ 2143.672159] free:2076 free_pcp:809 free_cma:0 [ 2143.675140] Node 0 active_anon:10396kB inactive_anon:1024512kB active_file:796kB inactive_file:10412kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:278696kB dirty:80kB writeback:0kB shmem:436kB kernel_stack:9280kB pagetables:27856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2143.677181] Node 0 DMA free:6412kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8308kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 2143.679394] lowmem_reserve[]: 0 1600 1600 1600 [ 2143.679802] Node 0 DMA32 free:1892kB boost:0kB min:5072kB low:6696kB high:8320kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:10392kB inactive_anon:1016204kB active_file:796kB inactive_file:10540kB unevictable:0kB writepending:80kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:3216kB local_pcp:3016kB free_cma:0kB [ 2143.682223] lowmem_reserve[]: 0 0 0 0 [ 2143.682543] Node 0 DMA: 11*4kB (UM) 4*8kB (M) 8*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6412kB [ 2143.683834] Node 0 DMA32: 0*4kB 1*8kB (U) 78*16kB (UM) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1768kB [ 2143.684860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2143.685517] 2985 total pagecache pages [ 2143.685842] 0 pages in swap cache [ 2143.686117] Free swap = 0kB [ 2143.686361] Total swap = 0kB [ 2143.686602] 524158 pages RAM [ 2143.686861] 0 pages HighMem/MovableOnly [ 2143.687172] 110572 pages reserved [ 2143.687445] slab_out_of_memory: 12 callbacks suppressed [ 2143.687452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2143.688568] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2143.689330] node 0: slabs: 323, objs: 3876, free: 0 [ 2143.689765] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2143.690462] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2143.691228] node 0: slabs: 323, objs: 3876, free: 0 [ 2143.692031] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2143.692764] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2143.693511] node 0: slabs: 323, objs: 3876, free: 0 [ 2143.698119] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2143.698926] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2143.699653] node 0: slabs: 774, objs: 6350, free: 0 [ 2143.700108] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2143.700910] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2143.701691] node 0: slabs: 774, objs: 6350, free: 0 [ 2149.972343] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2149.973220] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2149.973686] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2149.973998] node 0: slabs: 714, objs: 6286, free: 0 [ 2149.975435] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2149.977307] node 0: slabs: 325, objs: 3900, free: 0 [ 2149.978176] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2149.979559] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2149.981031] node 0: slabs: 325, objs: 3900, free: 0 [ 2149.981872] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2149.983268] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2149.984756] node 0: slabs: 325, objs: 3900, free: 0 [ 2149.985577] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 2149.987018] cache: skbuff_head_cache, object size: 232, buffer size: 320, default order: 0, min order: 0 [ 2149.988508] node 0: slabs: 325, objs: 3900, free: 0 [ 2149.989592] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2149.991190] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2149.992626] node 0: slabs: 714, objs: 6286, free: 0 [ 2149.993558] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2149.995149] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2149.996601] node 0: slabs: 714, objs: 6286, free: 0 [ 2149.997505] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2149.999080] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2149.999710] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2150.000522] node 0: slabs: 714, objs: 6286, free: 0 [ 2150.001291] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2150.002205] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2150.002865] node 0: slabs: 714, objs: 6286, free: 0 [ 2150.005202] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2150.006658] node 0: slabs: 714, objs: 6286, free: 0 [ 2157.038784] warn_alloc: 45 callbacks suppressed [ 2157.038812] kworker/u10:3: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2157.038894] slab_out_of_memory: 31 callbacks suppressed [ 2157.038914] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.039681] ,cpuset= [ 2157.040516] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.040532] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.041400] / [ 2157.042260] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.042635] ,mems_allowed=0 [ 2157.043362] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.044224] [ 2157.044341] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.046210] CPU: 1 UID: 0 PID: 31131 Comm: kworker/u10:3 Not tainted 6.17.0-next-20251009 #1 PREEMPT(voluntary) [ 2157.046250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.046267] Workqueue: events_unbound cfg80211_wiphy_work [ 2157.046309] Call Trace: [ 2157.046322] [ 2157.046333] dump_stack_lvl+0xfa/0x120 [ 2157.046365] warn_alloc+0x211/0x360 [ 2157.046393] ? __pfx_warn_alloc+0x10/0x10 [ 2157.046441] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2157.046481] ? __lock_acquire+0x694/0x1b70 [ 2157.046510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2157.046546] ? lock_acquire+0x15e/0x2f0 [ 2157.046573] ? unwind_next_frame+0xb9/0x2540 [ 2157.046623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2157.046658] ? policy_nodemask+0xeb/0x4e0 [ 2157.046688] alloc_pages_mpol+0xed/0x340 [ 2157.046714] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2157.046738] ? lock_is_held_type+0x9e/0x120 [ 2157.046773] new_slab+0x257/0x330 [ 2157.046798] ___slab_alloc+0x9f4/0x11f0 [ 2157.046823] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2157.046853] ? arch_stack_walk+0x86/0xf0 [ 2157.046889] ? __slab_alloc.constprop.0+0x2c/0x60 [ 2157.046911] __slab_alloc.constprop.0+0x2c/0x60 [ 2157.046933] __kmalloc_noprof+0x51c/0x760 [ 2157.046954] ? register_lock_class+0x41/0x560 [ 2157.046985] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2157.047015] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2157.047038] ieee802_11_parse_elems_full+0x187/0x3190 [ 2157.047078] ? find_held_lock+0x2b/0x80 [ 2157.047113] ? paint_ptr+0x36/0x90 [ 2157.047139] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2157.047164] ? do_raw_spin_unlock+0x53/0x220 [ 2157.047205] ? mark_held_locks+0x49/0x80 [ 2157.047234] ? __asan_memcpy+0x3d/0x60 [ 2157.047272] ieee80211_inform_bss+0xf3/0x10b0 [ 2157.047314] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2157.047359] ? cfg80211_inform_single_bss_data+0x4e9/0x1bd0 [ 2157.047393] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2157.047431] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2157.047468] ? unwind_next_frame+0x3bc/0x2540 [ 2157.047503] ? ret_from_fork_asm+0x1a/0x30 [ 2157.047535] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2157.047565] ? kernel_text_address+0x11/0xc0 [ 2157.047615] ? stack_trace_save+0x8e/0xc0 [ 2157.047647] ? stack_depot_save_flags+0x2c/0xa20 [ 2157.047681] cfg80211_inform_bss_data+0x215/0x34f0 [ 2157.047710] ? kasan_save_track+0x14/0x30 [ 2157.047743] ? __kasan_kmalloc+0x7f/0x90 [ 2157.047776] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2157.047800] ? ieee80211_iface_work+0xd52/0x1220 [ 2157.047822] ? cfg80211_wiphy_work+0x245/0x480 [ 2157.047854] ? worker_thread+0x67e/0xe90 [ 2157.047880] ? kthread+0x3c8/0x740 [ 2157.047903] ? ret_from_fork+0x38b/0x470 [ 2157.047939] ? ret_from_fork_asm+0x1a/0x30 [ 2157.047979] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2157.048018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2157.048052] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 2157.048098] ? __lock_acquire+0x694/0x1b70 [ 2157.048143] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2157.048183] ieee80211_bss_info_update+0x2f5/0xa90 [ 2157.048223] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2157.048269] ? find_held_lock+0x2b/0x80 [ 2157.048304] ? ieee80211_ibss_rx_queued_mgmt+0x1893/0x2f70 [ 2157.048343] ? lock_release+0xc8/0x290 [ 2157.048375] ieee80211_ibss_rx_queued_mgmt+0x18c9/0x2f70 [ 2157.048428] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2157.048467] ? __lock_acquire+0xc65/0x1b70 [ 2157.048519] ? mark_held_locks+0x49/0x80 [ 2157.048558] ieee80211_iface_work+0xd52/0x1220 [ 2157.048589] cfg80211_wiphy_work+0x245/0x480 [ 2157.048626] process_one_work+0x8e1/0x19c0 [ 2157.048668] ? __pfx_process_one_work+0x10/0x10 [ 2157.048696] ? move_linked_works+0x172/0x270 [ 2157.048737] ? assign_work+0x196/0x240 [ 2157.048767] worker_thread+0x67e/0xe90 [ 2157.048796] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2157.048831] ? __pfx_worker_thread+0x10/0x10 [ 2157.048861] kthread+0x3c8/0x740 [ 2157.048887] ? __pfx_kthread+0x10/0x10 [ 2157.048910] ? ret_from_fork+0x23/0x470 [ 2157.048946] ? lock_release+0xc8/0x290 [ 2157.048974] ? __pfx_kthread+0x10/0x10 [ 2157.049001] ret_from_fork+0x38b/0x470 [ 2157.049036] ? __pfx_kthread+0x10/0x10 [ 2157.049061] ret_from_fork_asm+0x1a/0x30 [ 2157.049108] [ 2157.049152] Mem-Info: [ 2157.049226] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.050126] active_anon:2599 inactive_anon:256141 isolated_anon:0 [ 2157.050126] active_file:2721 inactive_file:487 isolated_file:32 [ 2157.050126] unevictable:0 dirty:0 writeback:0 [ 2157.050126] slab_reclaimable:3902 slab_unreclaimable:57131 [ 2157.050126] mapped:69781 shmem:109 pagetables:6964 [ 2157.050126] sec_pagetables:0 bounce:0 [ 2157.050126] kernel_misc_reclaimable:0 [ 2157.050126] free:1869 free_pcp:1403 free_cma:0 [ 2157.050331] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.050740] Node 0 active_anon:10396kB inactive_anon:1024564kB active_file:10884kB inactive_file:1948kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:279124kB dirty:0kB writeback:0kB shmem:436kB kernel_stack:9280kB pagetables:27856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2157.051048] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.051668] Node 0 [ 2157.052036] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.052868] DMA free:6420kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8308kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 2157.053195] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.054132] lowmem_reserve[]: [ 2157.054450] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.055195] 0 [ 2157.055665] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.056301] 1600 [ 2157.056658] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.056673] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.057423] 1600 [ 2157.057843] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.058377] 1600 [ 2157.058734] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.058749] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.059602] [ 2157.059995] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.060761] Node 0 [ 2157.061149] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.061857] DMA32 free:1056kB boost:4096kB min:9168kB low:10792kB high:12416kB reserved_highatomic:2048KB free_highatomic:88KB active_anon:10392kB inactive_anon:1016256kB active_file:10884kB inactive_file:1948kB unevictable:0kB writepending:0kB zspages:0kB present:2080640kB managed:1638984kB mlocked:0kB bounce:0kB free_pcp:5604kB local_pcp:3092kB free_cma:0kB [ 2157.062209] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.063100] lowmem_reserve[]: [ 2157.063566] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.064384] 0 [ 2157.064710] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.064724] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.065300] 0 [ 2157.065819] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.066507] 0 [ 2157.066861] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.066876] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.067500] 0 [ 2157.067939] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2157.068743] [ 2157.069202] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2157.070048] Node 0 [ 2157.070480] node 0: slabs: 608, objs: 6802, free: 0 [ 2157.071239] DMA: 12*4kB (UM) 5*8kB (UM) 8*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6424kB [ 2157.167488] Node 0 DMA32: 576*4kB (UM) 392*8kB (UMH) 165*16kB (UMH) 1*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8112kB [ 2157.170011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2157.171691] 3133 total pagecache pages [ 2157.172373] 0 pages in swap cache [ 2157.172980] Free swap = 0kB [ 2157.173490] Total swap = 0kB [ 2157.174038] 524158 pages RAM [ 2157.174547] 0 pages HighMem/MovableOnly [ 2157.175231] 110572 pages reserved [ 2168.233801] kworker/u10:5 (13785) used greatest stack depth: 22008 bytes left [ 2175.147260] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [ 2175.175456] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. [ 2175.227189] systemd[1]: systemd-journald.service: Consumed 1min 5.017s CPU time. [ 2175.236233] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 2. [ 2175.237639] systemd[1]: Stopped Journal Service. [ 2175.245436] systemd[1]: systemd-journald.service: Consumed 1min 5.017s CPU time. [ 2175.337798] systemd[1]: Starting Journal Service... [ 2177.499501] systemd-journald[34060]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. VM DIAGNOSIS: 13:41:25 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819371bf RDX=ffff888055cb9b80 RSI=ffffffff819371d0 RDI=ffff88801fc1f310 RBP=0000000000000000 RSP=ffff88801fc1f170 R8 =0000000000000000 R9 =ffffed100fffbaba R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff819371d5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc494b22900 00000000 00000000 GS =0000 ffff8880e53be000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc495448950 CR3=000000000e523000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=494e4f544f4e4f4d5f454352554f535f XMM01=454d49545f43494e4f544f4e4f4d5f45 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=4ca178f9ef2e8ec300000000000c43a0 XMM05=a1fcdcf819d7e1e500000000000b04c8 XMM06=5837fe9dc1c91f3200000000000b0420 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000202020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880094a8000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff8880094a8000 RDI=0000000000000000 RBP=ffff8880094be040 RSP=ffff88800b697a48 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88800b697c30 R14=ffff8880094a8000 R15=dffffc0000000000 RIP=ffffffff81b35597 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54be000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000004666c0 CR3=000000000ca43000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=12d3a926c9f95b796be5bb6ac5e12737 XMM01=a2c6695e86547d452d9c4a9ee644c709 XMM02=df1d6519812ec41ca6d3c784bd1323f0 XMM03=a0c816ea336276e74574b8ef9d2c6529 XMM04=00000000000000000000000000000592 XMM05=00000000000000000080010000000592 XMM06=00000000000000000000000000800100 XMM07=00800100000005920000059200800100 XMM08=c80000005c00000018000000c2000000 XMM09=00000000000000000000000000000000 XMM10=3042ad9448ad5aecb287876efb602ee3 XMM11=cb9578e2e810338c71e14accb903f841 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=0000000000000000000000000001b340 XMM15=00000000000000000000000000000040