0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 23) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:09:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:09:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) [ 1865.316078] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1865.316105] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 1865.330342] FAULT_INJECTION: forcing a failure. [ 1865.330342] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.332395] CPU: 1 PID: 9457 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1865.333458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.334523] Call Trace: [ 1865.334882] [ 1865.335203] dump_stack_lvl+0xc1/0xf0 [ 1865.335744] should_fail_ex+0x4b4/0x5b0 [ 1865.336318] ? mas_alloc_nodes+0x4e7/0x890 [ 1865.336930] should_failslab+0x9/0x20 [ 1865.337477] kmem_cache_alloc+0x61/0x390 [ 1865.338093] mas_alloc_nodes+0x4e7/0x890 [ 1865.338668] mas_node_count_gfp+0x106/0x140 [ 1865.339258] mas_preallocate+0x2d7/0xd70 [ 1865.339793] ? __pfx_mas_preallocate+0x10/0x10 [ 1865.340380] ? __pfx_lock_release+0x10/0x10 [ 1865.340928] ? lock_is_held_type+0x9f/0x120 [ 1865.341505] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1865.342250] vma_link+0x100/0x3f0 [ 1865.342720] ? __pfx_vma_link+0x10/0x10 [ 1865.343246] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1865.343944] insert_vm_struct+0xf2/0x290 [ 1865.344489] alloc_bprm+0x4ec/0xbb0 [ 1865.345003] do_execveat_common+0x237/0x8e0 [ 1865.345581] ? __pfx_do_execveat_common+0x10/0x10 [ 1865.346233] __x64_sys_execveat+0xe4/0x130 [ 1865.346794] do_syscall_64+0x3f/0x90 [ 1865.347298] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1865.347982] RIP: 0033:0x7f4229166b19 [ 1865.348471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1865.350718] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1865.351660] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1865.352549] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1865.353444] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1865.354339] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1865.355221] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1865.356140] [ 1865.369667] Bluetooth: Unexpected continuation frame (len 4) 13:09:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:09:47 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaaaaaaaaa1204b3ed9fc9200200aaaaaaaaaa1211412f59721019d0f792f069ca4b5c5b1ee8fd0201ffffffffffff1351de2f89ef46a66c1ec6818a0f65d4d8db16b5ff00000000000000001454d5114c2bb18be6ee3901cb5c419666c61b93c97f0300aaaaaa"], 0x110) [ 1865.380269] FAULT_INJECTION: forcing a failure. [ 1865.380269] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.382182] CPU: 0 PID: 9462 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1865.382677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.383169] Call Trace: [ 1865.383333] [ 1865.383482] dump_stack_lvl+0xc1/0xf0 [ 1865.383734] should_fail_ex+0x4b4/0x5b0 [ 1865.384000] ? mas_alloc_nodes+0x4e7/0x890 [ 1865.384271] should_failslab+0x9/0x20 [ 1865.384519] kmem_cache_alloc+0x61/0x390 [ 1865.384803] mas_alloc_nodes+0x4e7/0x890 [ 1865.385070] mas_node_count_gfp+0x106/0x140 [ 1865.385343] mas_preallocate+0x2d7/0xd70 [ 1865.385611] ? __pfx_mas_preallocate+0x10/0x10 [ 1865.385916] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1865.386291] vma_link+0x100/0x3f0 [ 1865.386517] ? __pfx_vma_link+0x10/0x10 [ 1865.386775] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1865.387118] insert_vm_struct+0xf2/0x290 [ 1865.387382] alloc_bprm+0x4ec/0xbb0 [ 1865.387624] do_execveat_common+0x237/0x8e0 [ 1865.387900] ? __pfx_do_execveat_common+0x10/0x10 [ 1865.388212] __x64_sys_execveat+0xe4/0x130 [ 1865.388483] do_syscall_64+0x3f/0x90 [ 1865.388728] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1865.389054] RIP: 0033:0x7fa4da37eb19 [ 1865.389295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1865.390368] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1865.390828] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1865.391261] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c 13:09:47 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 24) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 1865.391695] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1865.392224] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1865.392676] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1865.393133] [ 1865.404091] Bluetooth: Unexpected continuation frame (len 4) [ 1865.431819] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1865.431841] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:09:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) 13:09:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaaaaaaaaa1204b3ed9fc9200200aaaaaaaaaa1211412f59721019d0f792f069ca4b5c"], 0x110) 13:09:47 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x4, 0xc8, 0x49, 0x8, "743310d861f20b65"}}}, 0x10) 13:09:47 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 24) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 1865.493107] Bluetooth: Unexpected continuation frame (len 4) 13:09:47 executing program 4: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) [ 1865.497161] Bluetooth: Unexpected continuation frame (len 4) 13:09:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 24) 13:09:47 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 25) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 1865.531369] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1865.531393] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:09:47 executing program 6: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:09:47 executing program 5: [ 1865.562959] Bluetooth: Unexpected continuation frame (len 4) [ 1865.606797] FAULT_INJECTION: forcing a failure. [ 1865.606797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1865.608561] CPU: 1 PID: 9486 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1865.609627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.610658] Call Trace: [ 1865.611000] [ 1865.611307] dump_stack_lvl+0xc1/0xf0 [ 1865.611828] should_fail_ex+0x4b4/0x5b0 [ 1865.612381] __should_fail_alloc_page+0xe0/0x110 [ 1865.613040] prepare_alloc_pages+0x178/0x500 [ 1865.613647] ? __pfx___lock_acquire+0x10/0x10 [ 1865.614250] ? __lock_acquire+0x19b1/0x6340 [ 1865.614828] __alloc_pages+0x149/0x480 [ 1865.615372] ? __pfx___alloc_pages+0x10/0x10 [ 1865.615987] ? mt_find+0x2a7/0x8b0 [ 1865.616470] ? lock_release+0x1e3/0x680 [ 1865.617020] alloc_pages+0x1a0/0x260 [ 1865.617537] __pud_alloc+0x3f/0x480 [ 1865.618042] __handle_mm_fault+0xcdb/0x2cc0 [ 1865.618610] ? __pfx_mt_find+0x10/0x10 [ 1865.619150] ? __pfx___handle_mm_fault+0x10/0x10 [ 1865.619792] ? find_vma+0x111/0x1b0 [ 1865.620281] ? follow_page_mask+0x235/0x19b0 [ 1865.620907] handle_mm_fault+0x2c1/0xb10 [ 1865.621463] __get_user_pages+0x4a6/0x1300 [ 1865.622056] ? __pfx___get_user_pages+0x10/0x10 [ 1865.622693] ? mas_store_prealloc+0xf4/0x160 [ 1865.623297] ? lock_is_held_type+0x9f/0x120 [ 1865.623901] get_user_pages_remote+0x248/0x970 [ 1865.624544] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1865.625242] ? alloc_bprm+0x648/0xbb0 [ 1865.625764] get_arg_page+0x12b/0x700 [ 1865.626286] ? __pfx_get_arg_page+0x10/0x10 [ 1865.626853] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1865.627477] ? count.constprop.0+0x1bb/0x290 [ 1865.628067] copy_string_kernel+0x196/0x4e0 [ 1865.628648] ? alloc_bprm+0x770/0xbb0 [ 1865.629165] do_execveat_common+0x4e7/0x8e0 [ 1865.629749] ? __pfx_do_execveat_common+0x10/0x10 [ 1865.630416] __x64_sys_execveat+0xe4/0x130 [ 1865.630984] do_syscall_64+0x3f/0x90 [ 1865.631498] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1865.632181] RIP: 0033:0x7f27b14f4b19 [ 1865.632695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1865.634971] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1865.635958] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1865.636911] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1865.637828] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1865.638748] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1865.639672] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1865.640621] 13:09:58 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 25) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:09:58 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:09:58 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:09:58 executing program 4: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 13:09:58 executing program 5: 13:09:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a0000000400018004000180"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x84) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x274, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x260, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x71}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5c, 0x5, "d28b1eeeebac8ca81ef484cee2a0850cfe0a2b92d784d966c21d5c27196b4330c7fbfc11adfae49ab1b0f49d4734e837dceb1f073ceda91f28ad27b0045c9a5cbab97aec7c2b191845d32bf8258a1b8bb15ac568b623ecc8"}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd34c}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@\xc6^#}\\%)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x15]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x749}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ':!#&}!*[]]@)$[.\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^=^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '):&(}\x1c!^\\}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "152172515ca3665cbc3929abff43b16d58359b2310af2f001169e07ec402f85cffefe72ca1f721d201584206035672f73ae0e69f9f0512e618c0f50d64c232d2cdc0417f0cdf638cec2b9142684caf575bfad19322b7ce49e0e432293fca3b5ccd99"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-]:\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910040000000000000000000739cdb4a8077e58673687e92c27e8349edc8eb6068f80c3b1d47846e35e"], 0x9) 13:09:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 25) 13:09:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) [ 1876.465894] FAULT_INJECTION: forcing a failure. [ 1876.465894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1876.467641] CPU: 1 PID: 9506 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1876.468893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.470103] Call Trace: [ 1876.470504] [ 1876.470862] dump_stack_lvl+0xc1/0xf0 [ 1876.471467] should_fail_ex+0x4b4/0x5b0 [ 1876.472110] __should_fail_alloc_page+0xe0/0x110 [ 1876.472862] prepare_alloc_pages+0x178/0x500 [ 1876.473533] ? __pfx___lock_acquire+0x10/0x10 [ 1876.474209] ? __lock_acquire+0x19b1/0x6340 [ 1876.474857] __alloc_pages+0x149/0x480 [ 1876.475462] ? __pfx___alloc_pages+0x10/0x10 [ 1876.475536] FAULT_INJECTION: forcing a failure. [ 1876.475536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1876.476133] ? mt_find+0x2a7/0x8b0 [ 1876.476174] ? lock_release+0x1e3/0x680 [ 1876.476224] alloc_pages+0x1a0/0x260 [ 1876.476272] __pud_alloc+0x3f/0x480 [ 1876.476317] __handle_mm_fault+0xcdb/0x2cc0 [ 1876.476356] ? __pfx_mt_find+0x10/0x10 [ 1876.476397] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.476457] ? find_vma+0x111/0x1b0 [ 1876.476488] ? follow_page_mask+0x235/0x19b0 [ 1876.476547] handle_mm_fault+0x2c1/0xb10 [ 1876.476597] __get_user_pages+0x4a6/0x1300 [ 1876.476662] ? __pfx___get_user_pages+0x10/0x10 [ 1876.476716] ? mas_store_prealloc+0xf4/0x160 [ 1876.476787] ? lock_is_held_type+0x9f/0x120 [ 1876.476848] get_user_pages_remote+0x248/0x970 [ 1876.476906] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1876.476957] ? alloc_bprm+0x648/0xbb0 [ 1876.477008] get_arg_page+0x12b/0x700 [ 1876.477044] ? __pfx_get_arg_page+0x10/0x10 [ 1876.477077] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1876.477113] ? count.constprop.0+0x1bb/0x290 [ 1876.477156] copy_string_kernel+0x196/0x4e0 [ 1876.477188] ? alloc_bprm+0x770/0xbb0 [ 1876.477232] do_execveat_common+0x4e7/0x8e0 [ 1876.477273] ? __pfx_do_execveat_common+0x10/0x10 [ 1876.494035] __x64_sys_execveat+0xe4/0x130 [ 1876.494604] do_syscall_64+0x3f/0x90 [ 1876.495105] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1876.495782] RIP: 0033:0x7fa4da37eb19 [ 1876.496271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.498550] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1876.499536] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1876.500440] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1876.501349] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1876.502244] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1876.503147] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1876.504077] [ 1876.504398] CPU: 0 PID: 9498 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1876.505601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.506730] Call Trace: [ 1876.507103] [ 1876.507436] dump_stack_lvl+0xc1/0xf0 [ 1876.508004] should_fail_ex+0x4b4/0x5b0 [ 1876.508605] __should_fail_alloc_page+0xe0/0x110 [ 1876.509379] prepare_alloc_pages+0x178/0x500 [ 1876.510054] __alloc_pages+0x149/0x480 [ 1876.510644] ? __pfx___alloc_pages+0x10/0x10 [ 1876.511302] ? find_held_lock+0x2c/0x110 [ 1876.511917] ? __pud_alloc+0x1cc/0x480 [ 1876.512493] ? __pfx_lock_release+0x10/0x10 [ 1876.513131] ? do_raw_spin_lock+0x125/0x270 [ 1876.513762] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1876.514447] alloc_pages+0x1a0/0x260 [ 1876.515006] __pmd_alloc+0x3f/0x8d0 [ 1876.515552] __handle_mm_fault+0xdd6/0x2cc0 [ 1876.516183] ? __pfx_mt_find+0x10/0x10 [ 1876.516775] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.517488] ? find_vma+0x111/0x1b0 [ 1876.518021] ? follow_page_mask+0x235/0x19b0 [ 1876.518682] handle_mm_fault+0x2c1/0xb10 [ 1876.519282] __get_user_pages+0x4a6/0x1300 [ 1876.519918] ? __pfx___get_user_pages+0x10/0x10 [ 1876.520613] ? mas_store_prealloc+0xf4/0x160 [ 1876.521281] ? lock_is_held_type+0x9f/0x120 [ 1876.521928] get_user_pages_remote+0x248/0x970 [ 1876.522611] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1876.523352] ? alloc_bprm+0x648/0xbb0 [ 1876.523923] get_arg_page+0x12b/0x700 [ 1876.524476] ? __pfx_get_arg_page+0x10/0x10 [ 1876.525161] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1876.525856] ? count.constprop.0+0x1bb/0x290 [ 1876.526504] copy_string_kernel+0x196/0x4e0 [ 1876.527120] ? alloc_bprm+0x770/0xbb0 [ 1876.527681] do_execveat_common+0x4e7/0x8e0 [ 1876.528322] ? __pfx_do_execveat_common+0x10/0x10 [ 1876.529067] __x64_sys_execveat+0xe4/0x130 [ 1876.529685] do_syscall_64+0x3f/0x90 [ 1876.530241] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1876.530983] RIP: 0033:0x7f27b14f4b19 [ 1876.531526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.534044] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1876.535139] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1876.536127] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1876.537126] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1876.538136] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1876.539186] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1876.540196] 13:09:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) [ 1876.553505] FAULT_INJECTION: forcing a failure. [ 1876.553505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1876.556343] CPU: 0 PID: 9502 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1876.557284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.558193] Call Trace: [ 1876.558497] [ 1876.558770] dump_stack_lvl+0xc1/0xf0 [ 1876.559233] should_fail_ex+0x4b4/0x5b0 [ 1876.559726] __should_fail_alloc_page+0xe0/0x110 [ 1876.560296] prepare_alloc_pages+0x178/0x500 [ 1876.560838] ? __pfx___lock_acquire+0x10/0x10 [ 1876.561374] ? __lock_acquire+0x19b1/0x6340 [ 1876.561884] __alloc_pages+0x149/0x480 [ 1876.562364] ? __pfx___alloc_pages+0x10/0x10 [ 1876.562909] ? mt_find+0x2a7/0x8b0 [ 1876.563339] ? lock_release+0x1e3/0x680 [ 1876.563822] alloc_pages+0x1a0/0x260 [ 1876.564277] __pud_alloc+0x3f/0x480 [ 1876.564725] __handle_mm_fault+0xcdb/0x2cc0 [ 1876.565304] ? __pfx_mt_find+0x10/0x10 [ 1876.565772] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.566419] ? find_vma+0x111/0x1b0 [ 1876.566907] ? follow_page_mask+0x235/0x19b0 [ 1876.567509] handle_mm_fault+0x2c1/0xb10 [ 1876.568059] __get_user_pages+0x4a6/0x1300 [ 1876.568642] ? __pfx___get_user_pages+0x10/0x10 [ 1876.569279] ? mas_store_prealloc+0xf4/0x160 [ 1876.569871] ? lock_is_held_type+0x9f/0x120 [ 1876.570463] get_user_pages_remote+0x248/0x970 [ 1876.571110] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1876.571826] ? alloc_bprm+0x648/0xbb0 [ 1876.572351] get_arg_page+0x12b/0x700 [ 1876.572869] ? __pfx_get_arg_page+0x10/0x10 [ 1876.573427] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1876.574048] ? count.constprop.0+0x1bb/0x290 [ 1876.574642] copy_string_kernel+0x196/0x4e0 [ 1876.575217] ? alloc_bprm+0x770/0xbb0 [ 1876.575743] do_execveat_common+0x4e7/0x8e0 [ 1876.576317] ? __pfx_do_execveat_common+0x10/0x10 [ 1876.577021] __x64_sys_execveat+0xe4/0x130 [ 1876.577601] do_syscall_64+0x3f/0x90 [ 1876.578123] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1876.578821] RIP: 0033:0x7f4229166b19 [ 1876.579315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.581609] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1876.583028] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1876.584341] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1876.585682] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1876.586992] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1876.588271] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1876.589351] 13:09:59 executing program 4: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 13:09:59 executing program 5: 13:09:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:09:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 26) [ 1876.687936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=9510 comm=syz-executor.6 13:09:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) [ 1876.716570] Bluetooth: Unexpected continuation frame (len 4) [ 1876.726738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=9516 comm=syz-executor.6 [ 1876.733526] Bluetooth: Unexpected continuation frame (len 4) 13:09:59 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 27) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 1876.802440] FAULT_INJECTION: forcing a failure. [ 1876.802440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1876.803949] CPU: 1 PID: 9524 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1876.805000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.805913] Call Trace: [ 1876.806249] [ 1876.806557] dump_stack_lvl+0xc1/0xf0 [ 1876.807081] should_fail_ex+0x4b4/0x5b0 [ 1876.807620] __should_fail_alloc_page+0xe0/0x110 [ 1876.808271] prepare_alloc_pages+0x178/0x500 [ 1876.808897] __alloc_pages+0x149/0x480 [ 1876.809421] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1876.810182] ? __pfx___alloc_pages+0x10/0x10 [ 1876.810803] ? mark_held_locks+0x9e/0xe0 [ 1876.811360] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1876.812056] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1876.812780] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1876.813482] alloc_pages+0x1a0/0x260 [ 1876.813992] __pmd_alloc+0x3f/0x8d0 [ 1876.814498] __handle_mm_fault+0xdd6/0x2cc0 [ 1876.815064] ? __pfx_mt_find+0x10/0x10 [ 1876.815598] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.816241] ? find_vma+0x111/0x1b0 [ 1876.816723] ? follow_page_mask+0x235/0x19b0 [ 1876.817325] handle_mm_fault+0x2c1/0xb10 [ 1876.817882] __get_user_pages+0x4a6/0x1300 [ 1876.818466] ? __pfx___get_user_pages+0x10/0x10 [ 1876.819090] ? mas_store_prealloc+0xf4/0x160 [ 1876.819625] ? lock_is_held_type+0x9f/0x120 [ 1876.820226] get_user_pages_remote+0x248/0x970 [ 1876.820798] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1876.821464] ? alloc_bprm+0x648/0xbb0 [ 1876.821931] get_arg_page+0x12b/0x700 [ 1876.822421] ? __pfx_get_arg_page+0x10/0x10 [ 1876.822992] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1876.823621] ? count.constprop.0+0x1bb/0x290 [ 1876.824228] copy_string_kernel+0x196/0x4e0 [ 1876.824800] ? alloc_bprm+0x770/0xbb0 [ 1876.825318] do_execveat_common+0x4e7/0x8e0 [ 1876.825889] ? __pfx_do_execveat_common+0x10/0x10 [ 1876.826549] __x64_sys_execveat+0xe4/0x130 [ 1876.827129] do_syscall_64+0x3f/0x90 [ 1876.827630] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1876.828245] RIP: 0033:0x7fa4da37eb19 [ 1876.828728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.830755] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1876.831722] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1876.832634] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1876.833571] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1876.834468] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1876.835392] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1876.836324] 13:09:59 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 26) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 1876.855563] FAULT_INJECTION: forcing a failure. [ 1876.855563] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.859434] CPU: 0 PID: 9526 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1876.860539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.861664] Call Trace: [ 1876.862024] [ 1876.862341] dump_stack_lvl+0xc1/0xf0 [ 1876.862885] should_fail_ex+0x4b4/0x5b0 [ 1876.863464] ? __pmd_alloc+0x9c/0x8d0 [ 1876.864007] should_failslab+0x9/0x20 [ 1876.864545] kmem_cache_alloc+0x61/0x390 [ 1876.865125] ? alloc_pages+0x1a8/0x260 [ 1876.865682] __pmd_alloc+0x9c/0x8d0 [ 1876.866212] __handle_mm_fault+0xdd6/0x2cc0 [ 1876.866825] ? __pfx_mt_find+0x10/0x10 [ 1876.867389] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.868061] ? find_vma+0x111/0x1b0 [ 1876.868585] ? follow_page_mask+0x235/0x19b0 [ 1876.869240] handle_mm_fault+0x2c1/0xb10 [ 1876.869849] __get_user_pages+0x4a6/0x1300 [ 1876.870452] ? __pfx___get_user_pages+0x10/0x10 [ 1876.871144] ? mas_store_prealloc+0xf4/0x160 [ 1876.871768] ? lock_is_held_type+0x9f/0x120 [ 1876.872404] get_user_pages_remote+0x248/0x970 [ 1876.873065] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1876.873800] ? alloc_bprm+0x648/0xbb0 [ 1876.874347] get_arg_page+0x12b/0x700 [ 1876.874898] ? __pfx_get_arg_page+0x10/0x10 [ 1876.875479] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1876.876155] ? count.constprop.0+0x1bb/0x290 [ 1876.876783] copy_string_kernel+0x196/0x4e0 [ 1876.877393] ? alloc_bprm+0x770/0xbb0 [ 1876.877939] do_execveat_common+0x4e7/0x8e0 [ 1876.878559] ? __pfx_do_execveat_common+0x10/0x10 [ 1876.879259] __x64_sys_execveat+0xe4/0x130 [ 1876.879868] do_syscall_64+0x3f/0x90 [ 1876.880411] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1876.881155] RIP: 0033:0x7f27b14f4b19 [ 1876.881692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.884121] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1876.885162] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1876.886129] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1876.887111] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1876.888079] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1876.889061] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1876.890054] [ 1876.924204] FAULT_INJECTION: forcing a failure. [ 1876.924204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1876.925907] CPU: 1 PID: 9529 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1876.926819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.927726] Call Trace: [ 1876.928031] [ 1876.928304] dump_stack_lvl+0xc1/0xf0 [ 1876.928774] should_fail_ex+0x4b4/0x5b0 [ 1876.929495] __should_fail_alloc_page+0xe0/0x110 [ 1876.930419] prepare_alloc_pages+0x178/0x500 [ 1876.931148] ? __pfx___lock_acquire+0x10/0x10 [ 1876.931855] ? __lock_acquire+0x19b1/0x6340 [ 1876.932538] __alloc_pages+0x149/0x480 [ 1876.933177] ? __pfx___alloc_pages+0x10/0x10 [ 1876.933891] ? mt_find+0x2a7/0x8b0 [ 1876.934472] ? lock_release+0x1e3/0x680 [ 1876.935006] alloc_pages+0x1a0/0x260 [ 1876.935608] __pud_alloc+0x3f/0x480 [ 1876.936187] __handle_mm_fault+0xcdb/0x2cc0 [ 1876.936877] ? __pfx_mt_find+0x10/0x10 [ 1876.937481] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.938243] ? find_vma+0x111/0x1b0 [ 1876.938808] ? follow_page_mask+0x235/0x19b0 [ 1876.939524] handle_mm_fault+0x2c1/0xb10 [ 1876.940177] __get_user_pages+0x4a6/0x1300 [ 1876.940903] ? __pfx___get_user_pages+0x10/0x10 [ 1876.941655] ? mas_store_prealloc+0xf4/0x160 [ 1876.942369] ? lock_is_held_type+0x9f/0x120 [ 1876.943080] get_user_pages_remote+0x248/0x970 [ 1876.943829] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1876.944648] ? alloc_bprm+0x648/0xbb0 [ 1876.945289] get_arg_page+0x12b/0x700 [ 1876.945889] ? __pfx_get_arg_page+0x10/0x10 [ 1876.946569] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1876.947315] ? count.constprop.0+0x1bb/0x290 [ 1876.947888] copy_string_kernel+0x196/0x4e0 [ 1876.948439] ? alloc_bprm+0x770/0xbb0 [ 1876.949084] do_execveat_common+0x4e7/0x8e0 [ 1876.949750] ? __pfx_do_execveat_common+0x10/0x10 [ 1876.950527] __x64_sys_execveat+0xe4/0x130 [ 1876.951187] do_syscall_64+0x3f/0x90 [ 1876.951767] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1876.952586] RIP: 0033:0x7f4229166b19 [ 1876.953184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.955902] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1876.957058] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1876.958159] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1876.959240] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1876.960319] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1876.961287] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1876.962186] 13:10:11 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 27) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:10:11 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:11 executing program 5: syz_emit_vhci(0x0, 0x110) 13:10:11 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x0, 0x0, 0x20, 0x0, 0xfe, 0x80044, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0xffffffffffffffc0}, 0x8c00, 0xfffffffffffffffe, 0x8, 0x6, 0x45, 0x5, 0x4, 0x0, 0x6, 0x0, 0xafc}, r3, 0xc, 0xffffffffffffffff, 0x8) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02cc10040000000100"], 0x9) 13:10:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 27) 13:10:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) 13:10:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:10:11 executing program 4: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[0x0, &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) [ 1889.414770] Bluetooth: hci7: ACL packet for unknown connection handle 204 [ 1889.432524] FAULT_INJECTION: forcing a failure. [ 1889.432524] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.434017] CPU: 1 PID: 9544 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 13:10:11 executing program 5: syz_emit_vhci(0x0, 0x110) [ 1889.435097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.436098] Call Trace: [ 1889.436417] [ 1889.436709] dump_stack_lvl+0xc1/0xf0 [ 1889.437208] should_fail_ex+0x4b4/0x5b0 [ 1889.437723] ? __pmd_alloc+0x9c/0x8d0 [ 1889.438210] should_failslab+0x9/0x20 [ 1889.438703] kmem_cache_alloc+0x61/0x390 [ 1889.439221] ? alloc_pages+0x1a8/0x260 [ 1889.439735] __pmd_alloc+0x9c/0x8d0 [ 1889.440210] __handle_mm_fault+0xdd6/0x2cc0 [ 1889.440746] ? __pfx_mt_find+0x10/0x10 [ 1889.441271] ? __pfx___handle_mm_fault+0x10/0x10 [ 1889.441892] ? find_vma+0x111/0x1b0 13:10:11 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1889.442353] ? follow_page_mask+0x235/0x19b0 [ 1889.443055] handle_mm_fault+0x2c1/0xb10 [ 1889.443574] __get_user_pages+0x4a6/0x1300 [ 1889.444124] ? __pfx___get_user_pages+0x10/0x10 [ 1889.444717] ? mas_store_prealloc+0xf4/0x160 [ 1889.445310] ? lock_is_held_type+0x9f/0x120 [ 1889.445865] get_user_pages_remote+0x248/0x970 [ 1889.446451] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1889.447083] ? alloc_bprm+0x648/0xbb0 [ 1889.447574] get_arg_page+0x12b/0x700 [ 1889.448077] ? __pfx_get_arg_page+0x10/0x10 [ 1889.448614] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1889.449211] ? count.constprop.0+0x1bb/0x290 [ 1889.449761] copy_string_kernel+0x196/0x4e0 [ 1889.450288] ? alloc_bprm+0x770/0xbb0 [ 1889.450776] do_execveat_common+0x4e7/0x8e0 [ 1889.451345] ? __pfx_do_execveat_common+0x10/0x10 [ 1889.451961] __x64_sys_execveat+0xe4/0x130 [ 1889.452515] do_syscall_64+0x3f/0x90 [ 1889.453015] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1889.453669] RIP: 0033:0x7f4229166b19 [ 1889.454128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.456318] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1889.457240] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1889.458109] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1889.458987] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1889.459865] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1889.460741] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1889.461669] [ 1889.472954] FAULT_INJECTION: forcing a failure. [ 1889.472954] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.474468] CPU: 1 PID: 9550 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1889.475455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.476426] Call Trace: [ 1889.476752] [ 1889.477069] dump_stack_lvl+0xc1/0xf0 [ 1889.477555] should_fail_ex+0x4b4/0x5b0 [ 1889.478076] ? __pmd_alloc+0x9c/0x8d0 [ 1889.478557] should_failslab+0x9/0x20 [ 1889.479038] kmem_cache_alloc+0x61/0x390 [ 1889.479564] ? alloc_pages+0x1a8/0x260 [ 1889.480066] __pmd_alloc+0x9c/0x8d0 [ 1889.480545] __handle_mm_fault+0xdd6/0x2cc0 [ 1889.481089] ? __pfx_mt_find+0x10/0x10 [ 1889.481590] ? __pfx___handle_mm_fault+0x10/0x10 [ 1889.482202] ? find_vma+0x111/0x1b0 [ 1889.482666] ? follow_page_mask+0x235/0x19b0 [ 1889.483245] handle_mm_fault+0x2c1/0xb10 [ 1889.483769] __get_user_pages+0x4a6/0x1300 [ 1889.484323] ? __pfx___get_user_pages+0x10/0x10 [ 1889.484933] ? mas_store_prealloc+0xf4/0x160 [ 1889.485503] ? lock_is_held_type+0x9f/0x120 [ 1889.486063] get_user_pages_remote+0x248/0x970 [ 1889.486653] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1889.487288] ? alloc_bprm+0x648/0xbb0 [ 1889.487784] get_arg_page+0x12b/0x700 [ 1889.488280] ? __pfx_get_arg_page+0x10/0x10 [ 1889.488812] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1889.489421] ? count.constprop.0+0x1bb/0x290 [ 1889.489983] copy_string_kernel+0x196/0x4e0 [ 1889.490524] ? alloc_bprm+0x770/0xbb0 [ 1889.491021] do_execveat_common+0x4e7/0x8e0 [ 1889.491572] ? __pfx_do_execveat_common+0x10/0x10 [ 1889.492189] __x64_sys_execveat+0xe4/0x130 [ 1889.492722] do_syscall_64+0x3f/0x90 [ 1889.493208] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1889.493857] RIP: 0033:0x7fa4da37eb19 [ 1889.494318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.496427] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1889.497391] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1889.498265] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1889.499132] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1889.499989] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1889.500855] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1889.501779] 13:10:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='1-\x00', 0x6) flistxattr(r0, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:10:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:10:12 executing program 5: syz_emit_vhci(0x0, 0x110) 13:10:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) [ 1889.618426] Bluetooth: Unexpected continuation frame (len 4) 13:10:12 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 28) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:10:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 28) 13:10:12 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = dup(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x3e, 0x7f, 0x4, 0x0, 0x6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x3002, 0x200, 0x326, 0x3, 0x10000, 0x9, 0x81, 0x0, 0x7fff, 0x0, 0x5}, r1, 0xa, r2, 0x9) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c91004009d00f547"], 0x9) [ 1889.675856] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1889.675898] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1889.734315] Bluetooth: Unexpected continuation frame (len 4) [ 1889.736567] Bluetooth: Unexpected continuation frame (len 4) 13:10:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 29) 13:10:25 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910040000000100ab80d58673"], 0x9) 13:10:25 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:10:25 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 29) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:25 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3f, 0x0, 0x80, 0x1, "1eb401d81704796c"}}}, 0x10) 13:10:25 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 29) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:10:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) 13:10:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) [ 1903.087457] FAULT_INJECTION: forcing a failure. [ 1903.087457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1903.089323] CPU: 0 PID: 9577 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1903.089855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.090397] Call Trace: [ 1903.090579] [ 1903.090743] dump_stack_lvl+0xc1/0xf0 [ 1903.091013] should_fail_ex+0x4b4/0x5b0 [ 1903.091299] __should_fail_alloc_page+0xe0/0x110 [ 1903.091636] prepare_alloc_pages+0x178/0x500 [ 1903.091957] __alloc_pages+0x149/0x480 [ 1903.092233] ? __pfx___alloc_pages+0x10/0x10 [ 1903.092547] ? find_held_lock+0x2c/0x110 [ 1903.092837] ? __pmd_alloc+0x39a/0x8d0 [ 1903.093119] alloc_pages+0x1a0/0x260 [ 1903.093388] pte_alloc_one+0x22/0x330 [ 1903.093665] __pte_alloc+0x6d/0x350 [ 1903.093918] ? __pfx___pte_alloc+0x10/0x10 [ 1903.094205] ? _raw_spin_unlock+0x1e/0x40 [ 1903.094492] ? __pmd_alloc+0x39f/0x8d0 [ 1903.094764] __handle_mm_fault+0x2382/0x2cc0 [ 1903.095064] ? __pfx_mt_find+0x10/0x10 [ 1903.095335] ? __pfx___handle_mm_fault+0x10/0x10 [ 1903.095668] ? find_vma+0x111/0x1b0 [ 1903.095917] ? follow_page_mask+0x235/0x19b0 [ 1903.096226] handle_mm_fault+0x2c1/0xb10 [ 1903.096515] __get_user_pages+0x4a6/0x1300 [ 1903.096816] ? __pfx___get_user_pages+0x10/0x10 [ 1903.097158] ? mas_store_prealloc+0xf4/0x160 [ 1903.097484] ? lock_is_held_type+0x9f/0x120 [ 1903.097811] get_user_pages_remote+0x248/0x970 [ 1903.098161] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1903.098510] ? alloc_bprm+0x648/0xbb0 [ 1903.098802] get_arg_page+0x12b/0x700 [ 1903.099076] ? __pfx_get_arg_page+0x10/0x10 [ 1903.099390] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1903.099708] ? count.constprop.0+0x1bb/0x290 [ 1903.100023] copy_string_kernel+0x196/0x4e0 [ 1903.100316] ? alloc_bprm+0x770/0xbb0 [ 1903.100600] do_execveat_common+0x4e7/0x8e0 [ 1903.100891] ? __pfx_do_execveat_common+0x10/0x10 [ 1903.101255] __x64_sys_execveat+0xe4/0x130 [ 1903.101569] do_syscall_64+0x3f/0x90 [ 1903.101846] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1903.102230] RIP: 0033:0x7fa4da37eb19 [ 1903.102503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.103789] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1903.104321] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1903.104834] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1903.105342] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1903.105845] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1903.106347] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1903.106854] [ 1903.128339] FAULT_INJECTION: forcing a failure. [ 1903.128339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1903.129794] CPU: 0 PID: 9580 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1903.130355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.130886] Call Trace: [ 1903.131067] [ 1903.131228] dump_stack_lvl+0xc1/0xf0 [ 1903.131485] should_fail_ex+0x4b4/0x5b0 [ 1903.131772] __should_fail_alloc_page+0xe0/0x110 [ 1903.132095] prepare_alloc_pages+0x178/0x500 [ 1903.132412] __alloc_pages+0x149/0x480 [ 1903.132686] ? __pfx___alloc_pages+0x10/0x10 [ 1903.133014] ? find_held_lock+0x2c/0x110 [ 1903.133318] ? __pmd_alloc+0x39a/0x8d0 [ 1903.133590] alloc_pages+0x1a0/0x260 [ 1903.133849] pte_alloc_one+0x22/0x330 [ 1903.134114] __pte_alloc+0x6d/0x350 [ 1903.134362] ? __pfx___pte_alloc+0x10/0x10 [ 1903.134658] ? _raw_spin_unlock+0x1e/0x40 [ 1903.134949] ? __pmd_alloc+0x39f/0x8d0 [ 1903.135223] __handle_mm_fault+0x2382/0x2cc0 [ 1903.135526] ? __pfx_mt_find+0x10/0x10 [ 1903.135798] ? __pfx___handle_mm_fault+0x10/0x10 [ 1903.136139] ? find_vma+0x111/0x1b0 [ 1903.136396] ? follow_page_mask+0x235/0x19b0 [ 1903.136706] handle_mm_fault+0x2c1/0xb10 [ 1903.136994] __get_user_pages+0x4a6/0x1300 [ 1903.137299] ? __pfx___get_user_pages+0x10/0x10 [ 1903.137619] ? is_valid_gup_args+0x6a/0x1f0 [ 1903.137913] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 1903.138246] ? lock_is_held_type+0x9f/0x120 [ 1903.138549] get_user_pages_remote+0x248/0x970 [ 1903.138873] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1903.139252] get_arg_page+0x12b/0x700 [ 1903.139533] ? __pfx_get_arg_page+0x10/0x10 [ 1903.139844] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1903.140186] ? count.constprop.0+0x1bb/0x290 [ 1903.140508] copy_string_kernel+0x196/0x4e0 [ 1903.140820] ? alloc_bprm+0x770/0xbb0 [ 1903.141106] do_execveat_common+0x4e7/0x8e0 [ 1903.141418] ? __pfx_do_execveat_common+0x10/0x10 [ 1903.141782] __x64_sys_execveat+0xe4/0x130 [ 1903.142078] do_syscall_64+0x3f/0x90 [ 1903.142359] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1903.142734] RIP: 0033:0x7f27b14f4b19 [ 1903.142993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.144267] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1903.144798] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1903.145316] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1903.145826] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1903.146334] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1903.146834] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1903.147354] [ 1903.149661] Bluetooth: Unexpected continuation frame (len 4) [ 1903.163950] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1903.163997] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1903.168815] FAULT_INJECTION: forcing a failure. [ 1903.168815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1903.170281] CPU: 1 PID: 9588 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1903.171264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.172242] Call Trace: [ 1903.172564] [ 1903.172851] dump_stack_lvl+0xc1/0xf0 [ 1903.173372] should_fail_ex+0x4b4/0x5b0 [ 1903.173897] __should_fail_alloc_page+0xe0/0x110 [ 1903.174499] prepare_alloc_pages+0x178/0x500 [ 1903.175112] __alloc_pages+0x149/0x480 [ 1903.175621] ? __pfx___alloc_pages+0x10/0x10 [ 1903.176201] ? find_held_lock+0x2c/0x110 [ 1903.176727] ? __pmd_alloc+0x39a/0x8d0 [ 1903.177253] alloc_pages+0x1a0/0x260 [ 1903.177735] pte_alloc_one+0x22/0x330 [ 1903.178234] __pte_alloc+0x6d/0x350 [ 1903.178699] ? __pfx___pte_alloc+0x10/0x10 [ 1903.179224] ? _raw_spin_unlock+0x1e/0x40 [ 1903.179756] ? __pmd_alloc+0x39f/0x8d0 [ 1903.180256] __handle_mm_fault+0x2382/0x2cc0 [ 1903.180817] ? __pfx_mt_find+0x10/0x10 [ 1903.181335] ? __pfx___handle_mm_fault+0x10/0x10 [ 1903.181990] ? find_vma+0x111/0x1b0 [ 1903.182456] ? follow_page_mask+0x235/0x19b0 [ 1903.183029] handle_mm_fault+0x2c1/0xb10 [ 1903.183551] __get_user_pages+0x4a6/0x1300 [ 1903.184104] ? __pfx___get_user_pages+0x10/0x10 [ 1903.184703] ? finish_task_switch.isra.0+0x203/0x830 [ 1903.185366] ? __switch_to+0x5c6/0xeb0 [ 1903.185853] ? lock_is_held_type+0x9f/0x120 [ 1903.186408] get_user_pages_remote+0x248/0x970 [ 1903.186996] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1903.187652] get_arg_page+0x12b/0x700 [ 1903.188145] ? __pfx_get_arg_page+0x10/0x10 [ 1903.188687] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1903.189294] ? count.constprop.0+0x1bb/0x290 [ 1903.189857] copy_string_kernel+0x196/0x4e0 [ 1903.190383] ? alloc_bprm+0x770/0xbb0 [ 1903.190862] do_execveat_common+0x4e7/0x8e0 [ 1903.191412] ? __pfx_do_execveat_common+0x10/0x10 [ 1903.192030] __x64_sys_execveat+0xe4/0x130 [ 1903.192561] do_syscall_64+0x3f/0x90 [ 1903.193032] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1903.193717] RIP: 0033:0x7f4229166b19 [ 1903.194180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.196316] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 13:10:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) [ 1903.197302] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1903.198352] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1903.199209] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1903.200057] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1903.200925] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1903.201814] 13:10:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:10:25 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:10:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x43880}, 0xc, &(0x7f0000000300)={0x0, 0x290}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) [ 1903.277758] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1903.277786] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 sendmsg$netlink(r0, &(0x7f0000004800)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000004780)=[{&(0x7f00000004c0)={0x260, 0x34, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@generic="be4fd9eb2260e7677cb1a280a1313acc043bd92f505109db967b68046195fd89b376342300b3b57ea4caf81e02c567240447fd6b36460f6c5d498257cc3c36e7f588a5988996168e688b427ea0de54020b2b38d7993a42f9720d070505b1a3f6e0d7a04cc143d046c46f34ac955f73a85108ddb4bb5f69e16d6d81e435e7f0768d2a5b3663ef3bf0b33280a442858947a8bb952acbdc1e8c78ffaa5ce9e7c25a0f0529f24f5b9324301c945189991ffa4cc607724ca7aa82e95b22346b8f1ad6b63f30c5", @generic="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", @generic="4c85ccee25b0691f34d8cd0b35041292bc4f949347887095c4b08aa13bd91dd34fdab60fda331da5d498bf4dc6f1c6965a3a899d78ad710b9ac27bb51cb08133346e47b28883fce76ddbeec56c1c9b6cbe670b614af8cf08acacdb17fba57b0238694a2c047950acef88a9460b9783a6d3c14d940f0f18631f44e592921fbfd96ab953b7f64474cd9eddf5e9c9ffb5c5"]}, 0x260}, {&(0x7f0000000740)={0x15e8, 0x3b, 0x2, 0x70bd27, 0x25dfdbfc, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x1}, @nested={0x2b4, 0x37, 0x0, 0x1, [@generic="3ade4b5e8c8516384e7ac8b0b1c15d6dc7daf64482d2103fd946bae97f193843540859f7859e6d50af3ea3b70b205a7e565490f0cb860d20d7e6ec38ca21456dc1ddf4c272b9f34dd25b975a96c202294299f34e82708114378a0ef9dd6c6c20cc07b63b60c7d9616bc31ae000e49de93f154d5abb8b571eee01479005e689822768582bb51dc969e6f41216bd231b1f8a685a9813fbe237f25f6798eb41a709803d2fae7bece2716119f0d363787d87562a3ece5858175a4d86f7dfa1bb70ccd1bf010fcf9b9d02797c36a7a1d5a21751c32aeed4600c49c30c589e48ee942bffbbbeef23fa70aa0a23107c9c", @generic="3557da2912e84b55499a3a59bed71ad6d3f784269ea8edf7d6bf3bd5ed605c289a1f7e5ff6bfecc834b9bdb21462668d392cb9e01c142720acb3580e0018352a9a84f89519595eb2ed876023d870760c11fb4dcecf8c9c19fdc4f350e3baf0ed7110fd1d8f28b1a1d94d24632e5ef153896f8d5ed27ecb27f0cc061c06e8e9da408193e39ba97112537fd85a64deee30", @generic="0ff8a7b5a8abb32317cc95f2ab1880f9a4b1820bef1a501447ee8b2e51239dfa17e8a88e2abf62f52b4975e3e3e39d107e8832fbbda47fbfc56c23c544781cc19909e1f58f08be9292a21d708d7d53f2367d164d26857564a4838f9a0e34ed30e956e0c157419315054b230690d17bbef6596e2674235acfff0445613528b8feaeeb5f7d5b6461fd5a9ea36aadf593d0efe0f260e33c4b8cd9b3", @typed={0x4, 0x8a}, @typed={0x4, 0x1a}, @generic="6c43bdc468b69621591f5c0b586f0aefbe5755c6b17945d2269f1924b8d6a82accbd6f89a2a661001ba2fed6248bcbb82e7fb41030e3bea46daab686363f2b3ee39a79188208fa2050f636e37bbe5d4484c64f669506c88d8e97ebed381202b4890c426b5ea4cfde4ab2aaaa09f1b471ea17eb7c8769bcc5b4cd5bd298b596afea", @typed={0xe, 0x28, 0x0, 0x0, @binary="0c0559c6767c246000e4"}]}, @nested={0x1315, 0x54, 0x0, 0x1, [@generic="988b21c79eae25768f8644e43817b3b6a92c0046f32c87cd012939", @generic="888e142d337882ccb8606687560602bacae15c419e150f6f3c6cf7a29f8b7ef4d96073f22daf55fa9bea533fba8270987ccb0aaf9bb4eff3edb19e559df9b7505420e3c6645291e2c0d9476dcfadb30bdfbc93791be27245dde6437ef46e9e701b916275078415fe424a4a1c65498f6f96bad95413398a1804e4e760d02558036a58c6b8b69e6c69c6c2dc2f9272e0bbe7a7b11a0e53f1ca6e40d2941ef3321fc55282e7cfa728ff74c48629d2941046a92b6f15d908fa443de07875befb5291ad92bbea62bb8190d6317d7d731bb775e7e55819c49d973a4364f4d56e24d9", @generic="b3661c2d6bd7b818ef7a312a5f369a8430e07aacf6efd2c370a66eec7362d715acd4757629d60f24dd80b26cdef984084dd999563ec645d421ff9138fb91c28973eee3bc859cec8f5e2d20b6d8a5794ec41776bc4a632f881a3c959a44c8da10e00ffabebb7fc5697095ae0b202c73aef0e3cbaab4c70a79d7f5582f2a0e6f41b9ed17bf4c1f3a70b6325ee6ce82ad661d3c28eace3b27", @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="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", @typed={0x65, 0x1a, 0x0, 0x0, @binary="74a19a0861b43def7e6b7094ba0b7df44f2951f1e2e96b5e0185975c78bc56108b296a25283311d372209b9b7e6808d61ec674d5fae5753621534c4a10ae7904a238f2778e5aa644a8fbf7fc3fdc9a02442bc17e6487c3d961c827f28f6601f17e"}, @generic="a57f9e1f1934bfc16a6e136b252e67d18a0a91778ab1088edfc84b850388819f5ff839af0d0f14a2617474b3e9154b04d868693bb2e1ab8a1cc8519b8604190ffdebc793e1b06adc9d7309312265f4212848c55247a1ab9d7c85f86e95416face03032aaf23f16f3a39d847d57b6850b6c857fa9cff3f1eee50c3eb242c8a959055a44509dd8a28936d8aa1de98ce458d86ed024d66c3eaf0c39fdc3c0497895ddc76e4f87bbd5319ed3221322f74cb9dc4b6c5e978addba1704f6b48540e06f2b280c51abcc5e470ab25b29d859040899b532becb3dd97222ea5f6da094ba38033c9f51", @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="0fe86d9822e01be7f3e7565c9cf13bbb1ab1b992678e3e35"]}]}, 0x15e8}, {&(0x7f0000001d40)={0x368, 0x22, 0x10, 0x70bd26, 0x25dfdbfc, "", [@nested={0xed, 0x2a, 0x0, 0x1, [@generic="d849b4d5cc0f1fd7b5d357db4777e484", @generic="490e7d1ab6b3ee6c45e2cd79fada139d205e4ed3d1bdaf275082f17102636d58ce6ef729f9007b65418ff315fb543bfc58f113e25b96d3a6e82505ed93d94d0b5469ab1aa149799f022a958087f6b5a262b9d4b29de7c7dd5d70133c6400c6739b4ba6941beedc6ae70dd5121c1cd952efbdb5db333d468ffcf91aadec3696e375a594079fb63108cdc8731033eb60bac4ba1c031d2b85c4eff31555128e7f8ed6fbe55515fba950ebf4ac8d6fe692ee4af5a1b1a2fa9355137719957fca11de372c731c527c85d0030f2d3a4d5511cf971554753d", @typed={0x4, 0x75}]}, @generic="06daa5fd793064119e4c6cbe8288b72949f30368afb6c74ab9d7c4e3683b80c715039e89fa97b37d9086dbe2553ed0ed5ef1858c1c2bff269958d54631c7af7b2b200f7281fa2fe26bdce316c76a1af75c51ad36e78675b9657de19aedb5e511cd80758ab8e7f1ddb54bc3af6dc02a725ad3ce97613fde3fcd203329378a3da046e6573fdd673ee82a1173a56176549255bc", @generic="40d4c9f38e7505f0e802535ffd8a0e386cab7d3f2488421560a63744340a589e6ad1f419c7de75fe59ccbb84a59a4a55c074cf086938f2f609c84019eb07706fa961fa9866283a73c53f9f25e62a966f2641dece462bd68ad89cc45ff81892eb42b9ffb3e2de2ffa4e931456f829b2668d86143dec939fde2b5d59e3dfbd73ffccb7b51a4fb914d79a989f96e215e48496a9aea11674b61f23563281a86a2cc72f467c42d6b7f584ea908cce1a5fdd21c497059fe4fa6a5b1ad29224e9bea5d54e6ebad0c5d7a9f58eeb", @nested={0xf8, 0x8, 0x0, 0x1, [@generic="76352dc99621ba4ad3c7650c9368392ff5508ea46c34e76bb8c08db1108bd05a7ab97baea3aa54af0d4b5e68e22b8cd8e6f069698daaf7e868", @generic="248a621cee16edefe6384b9663a218c61e889d27453ff527be3aeaacba583e8392018ebcd26e6d0820846c0ee5a06609ebf645a3da03dfda5c36c5595f2c5f3d2ed5adb7366cdfed8c5c7c0e0b14bb497e857733a3524cadf84b59d357a65fbd1cde68a21fee64e927e477b8896272db2a3996e38bd3d7ebc9ca71acbdf56e695814e20f284eb32e1f61f3f41bb10ac6011e9b44ba2e51907fd6b93ac4dc83bbb9de16cd865ca13796f9e77cb0ba0e3bfc90bdf7a6b5ac", @typed={0x4, 0xd}]}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0xd55}, @generic, @typed={0x8, 0x45, 0x0, 0x0, @uid=0xee01}]}, 0x368}, {&(0x7f00000020c0)={0x18, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x72, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000002100)={0x138, 0x35, 0x104, 0x70bd25, 0x25dfdbfc, "", [@nested={0x5b, 0x46, 0x0, 0x1, [@generic="cba3db9d9f39bf3fea176bb57ab792fa6d07c78d93498991e203a3f83d289a7884fb5366fceba9e88ec22ecd78fe327a44632c8ced5313f0d7d03ae1561fef06cf804e55d467eed9144af7621b5d90d80c2cf4", @typed={0x4, 0x91}]}, @generic="4e0936cf4c28902f9c22040f90b82a3de5058def7b5cc1515bf4ca4c4f16eff023e0c2829f66e10c1ddecb297feb376172e4270287cc4a64cf79fe520b07f5cfe1c72ebd860b04502c1bf4bd598f8e58f22418f7fe901c6f36e22de7f0fc559eec92057207d3863e9b85ff9dbedc2aa695cbe36212374c112d5b76131e84e2f88a0c7a4ba8977420a57fc1beb35e4327d195d58c6cbca6368296839824de8e30af4cedeb1ade2ec0c9b48d28", @nested={0x20, 0x39, 0x0, 0x1, [@typed={0xd, 0x2b, 0x0, 0x0, @str='netdevsim'}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x6574}]}]}, 0x138}, {&(0x7f0000002240)={0x2538, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x177, 0x89, 0x0, 0x1, [@typed={0xc, 0x7e, 0x0, 0x0, @u64=0x4}, @generic="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", @generic="3619a968915b0974f034e2f6565db24b620e82ebc6aa950c2c1aca79c7c8de95a5e199820db6a86cff6965c294b0b227441e3fe0e541bf4aeea32c9e825373f434049d1265a8b23d7bb66b23924b47651efbf2598654625bccbc1b0081c08c706c6c30ea79b1ecbe7f784230bc"]}, @generic="012da154fac4ae1e97a53fe651557e45a56b9edf27acbe007aac59df9591378c0ef71dbf6d3ee905c22fefa235dda76b6f46a8fdabffa5ffca7aa75f9f02913a9a25c2a8d0061086ea98dda4e9728e909d5e4dcd282516439120c3144a58bef4977b286901d91cc4632cc8b28fc7a3cd4ae053e71c79b1bb1fe7568181cf64e7286b76406f9f6638ba541f4432de7d524ac7b39ffe2b269413ced2ab8e43a00e74d48b2b1de2cf3c0067e063b8db2f3df21263d4301ae278e85644", @generic="5a3614b79f0eabe4d60f732019104a9fae232cdcc8ad7f95cade25b3898ea1f4b40636ed0c20e8edf7c865a850bf02d518eaccb4b12b5e363fb36490c091061b14659c9a8395f8936900c6eebee7303b4fdb6457d31279", @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x5}, @nested={0x1024, 0x15, 0x0, 0x1, [@generic="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", @generic="a3c9efcf97b62f02523e5f94d966691e2620d219d1ba132d4bf48c53", @typed={0x4, 0x35}]}, @generic="10cd8283dd06d99bdc2d2053f8cf07bd8b77aa943f07e492c48aaa24e1e04c8b94c1678ac5e81e11b952a841bb115e36462f81eb93df5338c5e98f3f724b19d4826d4144738e7f7adf3bdcb8d17448f5aa699c88d48a1cd823d6d70dcbfd8b51afcbf6e90ed994d456ef19036eaf2c899e6cab5c600f078234f8106487f29dc2b7154efe3338e6d5b47810d93ec0d16ded7161bf15c673bbf56316596fdf3f0ca0d5a7e5f5bfea51b061a9c57deabe4893f78bc8baeb588c5ce71d2855b578f44dcaf6cec2802bb5ff75baef8f23c0bd2ef09bf867e84707d002577212c6da52e4c84cc3f8373f9d14606b", @nested={0x1179, 0x63, 0x0, 0x1, [@generic="e2ec170f54c55f9b44f0320455d9dbe8c6d88cff32aa0a0c20cc4a61190f8d922d58c9a9d806bc130ae6cf4e58335c4874960e9214830f89f9e90e2ae18273255cb1683f35b69cdf1c21547d53359c0ee28b372eedd2cd5b8eb6cde16476ef729f00f357aaadd7563f93015930d66b44c958c3f2968613e8adc95af12b03918a74a3", @typed={0x8, 0x95, 0x0, 0x0, @u32}, @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@remote}, @typed={0x1004, 0x77, 0x0, 0x0, @binary="75adb479966eab7379d23da6111e7b8b1f081b51ca0bbe14c14950419c2aa4d8696ba6920ce96adbf106ae1926a32f599f6a72e1c75f22f6cfec361dad6e81385b912fbcaf3bf3f5610fa8e42ad9844e18438802b22ca886b0a04d736a2efbd20a44115ddf0cbfbe250f835250ec876e06d029ed738fa942fc1f1197efff815881e5de42d1c352daef4e96e730aeb0bf1df0e98b4bc6d46e27ede978a81f0ae044b23d8752a7a5f592f51542d4ea52b08e187a3d1f56a71980e1dde4479e844f65417dc80e7c2d14aaa27cdf13cb0aabed6fde4fd68de26d1778665f73428bc17cf0ecaf9c2df60a3d572471fcc909767008533de3a751c9c47cbbf447860a1975ea3e9c36ed383eafbe24932443f3a3bc4937d151ba45838044d0c9f8c1ea72752de2b02620fbd7172ff97cca3b964f35ca7bad1541e17a4078f84cdbddb97e58d2a358b77bd732d00dad078a9be0e3f87058a378a59e0a4fd0efe7f0cbae2b340d027254638d524b2e8a0cbbfe25869bc52f6aea3bf3dce67ac5fb469eb77e3cc85054a2720563318b42d2541def1c50e8ce254aa2c6aa4d011470391476fc82162729295f274087cedbb638b77902c91d3520736ab6fabaf1905a3307efa88a6a014016ab56d9c38bedfdb091009e5ff2d3aa20d725061a67b586c5e31962df49b852e6e520f6f127026048826c6c44ef154860046d2cc0d937409250475cac0c1636c91ad63e9b92d749ab14686e8f645dde9c2945e2eb87156326259d237a278d012914addc09942c7d9352b2157606b85754881c96ea2af67c56bfc00bc320755d154fc6ebea1beafde9b30f302f748eb1551873c5e21a3c469091cf5590ace9ef11231817dd8d7700066c56cd344f5fcc7e12774f9b9b6f27365fd78ff241583c535417e4e29593eb9f75f856e8aeaa18b4c468d44f68a8f040d6564bad80a47e603d9727b9f5e63f4abe638e3f0a19da55d2e5d7e0d54145e5338a8447db7b152c3328db093e43e047ba75f578b45774d0bfee53f9d522dcfc32ea81843d35a56d73b21454b14ee63576a23753c9d50419bb5447e4da9fab7f5262b01f817668ef06f9ff21d61c0b2be501d575274a358d7033561f79761fe82f64cdaf0d2c6c5aca3ef0856766282e31d18a935877648f0c82c55570f39fbf1e142f0662b654854a925aee0f9bf2465f363113165d580466188b67a5103283f3cd841b6e10c49f8d56238406ad608983348b9fc87d3baa57a6995bad5670c1f1decbfb16ff86ed79ea8f7e94183a62cdaf0c5a6def6d7e35ce575cdbe16fc959f450288c0761938bf739e2fc6f338b20b94ebc06231c23ff48e6f8a9ddd60af8ea979c417d6e3de22431066be1fd440aba254977466551200f0f56ce3a8a7ffe38b2bec808f9e6d62220df3ca777faec4e3b6952638047331dff16692188fbab73254e7af2ff6340fbdc16bf91d863f9552cce54a1ead3a500b4f1b1304f121a8d8c3f766860e0e44af7e10d7727b1e9cdc3c083b74d4380d059573bee2c0c4894b0d34caa5d4aaf0374ec58d03b212b8b581e1caa1659f2765233254f2e438dbce33d294d2773daa4b41d3fefbc46ec615de9794cadeee47041aa996ad48627a7afb22dc9a74f5733b02d872ae9c2740654d2b36e540e0910d5b974116efa23d8722ccfca04bc4421b97347d8cb23d88923c5b63e5c790751da531f4300c45a764afba6f535403b16257370a9e44261c61ee7fc0efb80b532bfcd7693185d1b9aac67a1b49aba6804f2a5eabada007754216168e1bcbe4fab7288882de84e5037fbbb0ed0c3bede5bd7f5fca96b475e39b230685448d14918dcb25805760bed7d9c08496ace1dfb8109f23492770a880f064097ea381fcf3744cc03ea73599b6a5101f62824c0f695250ba62124a3ae80e77aa950c3189ff7e74f8b04508e84dcaada9584991c52f197284f317b144463310a885fda98a730c42e935fd8ebabb9116a16e5a7772dd4f5a911c2990557b13a07299258b3d21d89212127ea08d7a30db68807f39ea064fee4546758ce3054eb898a28cf6bd5cf895e84795cbef05da591d67adde9d02ad5e1017fcc84f9e5161279e19f8ce7d572d2cae06bd5212dc135e782fb756b44b054e6b0f5e50c27f41a560f32cf89bf61cd865a8433f4c87dad68ca7448b6888e6ff7bbb808089ff402de2af4c306c55380d3d3b46431f6d6f4add6922bf57b1e4794554981c612c7134eafbbee2d0bd8d82dbf1176423bcdcf4990d00f41ef1680747be460a8d6d4a464766f58ddf6ab8f2d2f1ccf16d4cf616ca8b304147c0ea7e063674ae3b1aaff7b80573f1d07e249599f4495a1d0a3a772e840bee29e12d1a5bb10c1b96f7a942163292748862c30983ecee29a088586b287dd08b74609e1f25c49159330c229609f60e514f297243483aae68a149215d6b19ba90f8aecc94e40c048204d471ede8469c25a12d56e4cd606f42ba89844dc2031f7c09703f9fcb4a3e0dc750074a43b90058541fd256655ab19bd7e54c3e55bcb76f04233a9a6527d5dbc188d33ebc5437b9991dcadb2f77f137f529b9af7146a30d92b39c329b816162a50ded202a957475db54895dbacb2651b727969c7e86923f31fb0c39307bf88ca639d36b0054f1fbab3779ead5cc93597a392e27528344eb3b5eca83898767b08c90437b6b479fd1cf02e66ac576f54c780b9f369499e53c126fa17dbd1a9cca5a8103a92ab070ff5276b16bb1915ab2c0b7070bc46241fbc6e92d252bce27d6381822ed676a07d009e9595e543ebcdf23e0a58adfabcb3d7ac1be755af97ef4abb1f1a75b04942dad3b88028262b6c0231b75d0485fc969750bce730e6dc5da566afc2d735d404154ab92421e7bc7a83e92c887c97d931698326528dbe23dc6da908deecb4c6a1467aa0b72303106dbb62a964aec8af14a66e73dd2d7f7c78f99665147b97a151054bfd04a4958e3743eb86c555fe1ec28b0e092e45d192be8c108dd078fab8f3e354ed371d173ab35047110600244e05a749226f5a6665d1d48ba6700d69eb3a140635bf7becfda772dfbdb20d48df6e783b38c2bbf6d936678e9407a32438cb5f99ff27d6ec47ec08737759cb62bb49fe0ca8e091a079bd8201b0d4e62c9e021668fdbf026e8bf85132e3efd68a7ab4f90e4576f94d8dce7f9c3d85d8053ad9bab9f57487994539c0ed639102b56e2ce1eda55d3c38e8e5db7cc5d9c12dad441dc3805525fec876662bec6249b43e8c4a1e2bab806afc50aa46128d27dc7cee2400a85ad638a4adf0ffbfde90875ed62b3243eff7e44c30bb028188e8188b09267bddbfb43373a72192da4235ad8f61e90845fab847756aad43602a01e603a40489336f83f1ea503de0d3722b4470a83516fe94899a75f7cbde7bfccb44a0e89684f6d467d97ae5236f269e857899c4664dca5f78910227f850b2c05c648f3c24c0d0136f6e5bf4a8e0f85cf00d482beb105c922e9575124fa5a9275f1a8275fc75ab553c5bd5116114e425fc1b7a52b70210365878ea94c156699aa4508896a42775f2ce69a1554e388fa7cf7659fbffb4d1d0463066eae1d128f53d09c464534c03607752e314f04bed811fe64d69b3af96d212087c2bf8e959c3d8e9323f2ae0b411ee6c38ee8eb49ec087e390539a3fe8fd0a6d27ee690f19348fd9c939aae4b36b1522504e617260850ee4ae2259e3620ea59091180dd154b1770ab1a4aba22c67e175c1f954d9ccdcc1db176c282adcc12ea7cd57fa46bfbf26f2e5b623d6cd22979a08305975422ac57a58475609622353e352737b8984a23526c99f1064516ef406c946137e1607be7b271b4a2def16e4022ce80436b17056a8002b80d8477aaa6849c65a61aba94cae1f2abe1fe505bca22ca99c0784f18fe7568e59edc28b2255205c747f0876e284bf00d1dcea30e9a79f08e4e34033cb0742b895ffdba8bd8d1c6e5d582bf358f852c371fb2d9500f00f6515a020d4adbee863d1b06e98419e00cd5edcd8304e529d2b4d7057ae5f7b3ab78bcc3a76c6c1bd4b0d90b46f974fa6e7dccda11ce9fd06ab264f42efa4fe082ccb274c21b2bb28cbe5da38880d6e07f743fa339e66b696fcc3d74dadd1dec56b3f6767f4b93ec93b6dd084b2f9d354bd57b9244f4784c811e966c5c406e3cbc333dafe2a4250847fc234c91656c68a740555cbb94fc587b3a7555e0ab56a71768a74a917edc21f2ba57e9d7307ce526ac9d8a8ddb4c75135427e6cd114205f15a5d55d76eded96b6aeb5f44cdf36875019c3a6096929acbcdc234c3a1c257d19ad263f65db72c0e3c1a1ef5a9e449b48e9dc3f304014322dc8f2910a3e339f6c14067f8a0dda6e4f391c516af0d601717af9c61cef2811a065e1e6c6112b32c123c7767d81d6e94253c263251700d189f01a730aed1fbdbdffde60faa0fe3a87b804c2de25ae6259f829b0b9418812f877b8a96b070024dc7b7cad4a90899affe09dbe0c8798f5c1dc78e93c190acd5320dd28efd84992647b55cd8e2021c2becd70edb42811be73f59cd2dbe757322c36935f0c0ff172de6225426fa6e8df98455a0743c4006a3355d4bc407f7763c65056516af2042e47558240cb1ad4254cb08898cecf997d740b0fa0046c1d50b98be70023f14534edc010d9472f32aa03d99e65dc3033c8bc202e924141e56c9197c32dfee0038e0b11b0b7d35ccb2da07e9b4c95d8403fb206106c3c7287faf9cdbfafcc392d042d6f1e220e0c1c7f9e79feeb560446b76a8d276d091b3288a6402c3e580140d6ba1e3ef34cccb709b56c304e3e112fd852bcdb861e88bc6c97e0e3f81bd77871d35525bfb1a951ee2899988d572af063f68ce914eee89156f8dbb9ce0c5e25c34332342648b854c2581f5b54eeb19594a0f42fc465dec6089e8b6e8dd7b22ebce4c3378c77d9ef83fe5482b512c738bd58b89aae4fdeaedf239379f86dfa5afc2d0ba3828e1e45e3a22db74b0aa9bc409b17da35399e6f917d05d5d7df5398aa67dbd0d4a7e837e184938912437375c5f6218926300ebaa6b058a557b4a1b7e770127f3848abb25cf60540db1ac1002e338aae24bfa2ae36f6792678005c2a75813173e2805cd29d9fcf2b369db9cfe4b2e2636a0245946d99611f08557fb002938eda62892f994b35cd80921acac124985c0e98929168fff391ac618e52445da0444ee6c5512729809e5f6e06f545c8aaf0a78faf87aac2682260b47d7f3b90c9d873b0261a1b537ac051364fe34767170695593e4989deb2739365410d6e52947f542a6463184ec1a34e4db2851488b40e73f0ceffebe8fbb7fdeebd12ec1438d466e53fd878adc0c051857f05ef1cd9a6f5df9b99ec98038055a723543c20bbf1e568555a602d5eeef38900f1110b9f04aeabbcfe1a641718f3962135e654271c64f9cd18ee53ec0a60e91cb50beb3c44cfbfb7bf0f78ad4d56abce1fef4783b6cb7a3e93c8fbe77e11f5489ada9e8191d2774e9ead8b2987d04e27e3edbca4c2bbab9a34ef974737c6fb3989476d23c1201ba36f9b2ae2f8fa7f731d58cd354914e2f45dbe087e8ede413ace92f764b1b08a584c4b20f6404e2ca733f97237c813b69bcc07493b670db6b9c336a51ef0457dcc58a2c293a7feaa3790ba028655fae225f5533f4be3c1d17771e5c00e700673b221d0af2ea49b69242bf6e8ded9cd249a1fee148193445418ad76e3a022e954cdd02f7189798e5ee3a5c9334e0dcc3e98f05b44b85fd44458b8e8dc14ebb64a471b63ffb8cd7bca"}, @generic="902584ac8118b89acd055d59f23e0cc2cbb3d77bf711e66502cde376b139f7e0c65ddefca3b1a6659861558a5f8b5f5eeb0518ad254501bd55f149e045417a5166795f867f321eb39913c29da8e4de2ee9ecb954db9ff0ed8f7b9cf070b87fa3f969c755cc922f23d31540734b8c58e46dd384a394b481a506df9e64441429d79331e72aeaeaf02276ebe57717ac559a3315fb3039a1aa5b70633569c6ca34f853cfac65a3d78f14391874f9b4525e95ed8c748df546d0f7444f24bbcf86055c56cbc4da4a514e8e13a15e69f4a1d886687dac45e25636", @typed={0x8, 0x25, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x59, 0x0, 0x0, @str='pci\x00'}]}, 0x2538}], 0x6, 0x0, 0x0, 0xc0}, 0x24040840) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x87}, @l2cap_cid_signaling={{0x83}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xf6, 0x2}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x4, 0x5dd, 0x81, 0x20}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x1, 0x1f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0xfffffffffffffea7}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x7f, 0x4}}, @l2cap_conf_req={{0x4, 0x3, 0x43}, {0x81, 0x1f, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7f, 0x5, 0x2, 0x91, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x5, 0x4, 0x0, 0x401, 0x8, 0x7fff}}, @l2cap_conf_mtu={0x1, 0x2, 0x7f}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x5, 0x6, 0x6, 0x4}}, @l2cap_conf_ews={0x7, 0x2, 0x80}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x1, 0x4, 0xff, 0x1}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x40, 0x8, 0x0, 0xfff9}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x9, 0x9}}]}}, 0x8c) r3 = accept(0xffffffffffffffff, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x80) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x134, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4081}, 0x44080) 13:10:25 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 30) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:25 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3f, 0x0, 0x80, 0x1, "1eb401d81704796c"}}}, 0x10) 13:10:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 30) 13:10:25 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 30) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 1903.312909] Bluetooth: Unexpected continuation frame (len 135) [ 1903.328281] FAULT_INJECTION: forcing a failure. [ 1903.328281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1903.329711] CPU: 1 PID: 9602 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1903.330631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.331548] Call Trace: [ 1903.331854] [ 1903.332128] dump_stack_lvl+0xc1/0xf0 [ 1903.332599] should_fail_ex+0x4b4/0x5b0 [ 1903.333103] __should_fail_alloc_page+0xe0/0x110 [ 1903.333676] prepare_alloc_pages+0x178/0x500 [ 1903.334223] __alloc_pages+0x149/0x480 [ 1903.334707] ? __pfx___alloc_pages+0x10/0x10 [ 1903.335258] ? find_held_lock+0x2c/0x110 13:10:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x0) [ 1903.335761] ? __pmd_alloc+0x39a/0x8d0 [ 1903.336364] alloc_pages+0x1a0/0x260 [ 1903.336825] pte_alloc_one+0x22/0x330 [ 1903.337302] __pte_alloc+0x6d/0x350 [ 1903.337805] ? __pfx___pte_alloc+0x10/0x10 [ 1903.338329] ? _raw_spin_unlock+0x1e/0x40 [ 1903.338852] ? __pmd_alloc+0x39f/0x8d0 [ 1903.339350] __handle_mm_fault+0x2382/0x2cc0 [ 1903.339903] ? __pfx_mt_find+0x10/0x10 [ 1903.340397] ? __pfx___handle_mm_fault+0x10/0x10 [ 1903.341005] ? find_vma+0x111/0x1b0 [ 1903.341490] ? follow_page_mask+0x235/0x19b0 [ 1903.342058] handle_mm_fault+0x2c1/0xb10 [ 1903.342595] __get_user_pages+0x4a6/0x1300 [ 1903.343139] ? __pfx___get_user_pages+0x10/0x10 [ 1903.343743] ? mas_store_prealloc+0xf4/0x160 [ 1903.344301] ? lock_is_held_type+0x9f/0x120 [ 1903.344873] get_user_pages_remote+0x248/0x970 [ 1903.345492] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1903.346157] ? alloc_bprm+0x648/0xbb0 13:10:25 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3f, 0x0, 0x80, 0x1, "1eb401d81704796c"}}}, 0x10) [ 1903.346646] get_arg_page+0x12b/0x700 [ 1903.347256] ? __pfx_get_arg_page+0x10/0x10 [ 1903.347796] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1903.348392] ? count.constprop.0+0x1bb/0x290 [ 1903.348949] copy_string_kernel+0x196/0x4e0 [ 1903.349499] ? alloc_bprm+0x770/0xbb0 [ 1903.349991] do_execveat_common+0x4e7/0x8e0 [ 1903.350535] ? __pfx_do_execveat_common+0x10/0x10 [ 1903.351162] __x64_sys_execveat+0xe4/0x130 [ 1903.351712] do_syscall_64+0x3f/0x90 [ 1903.352193] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1903.352835] RIP: 0033:0x7f27b14f4b19 [ 1903.353345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.355507] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1903.356431] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1903.356757] FAULT_INJECTION: forcing a failure. [ 1903.356757] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.357303] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1903.357324] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1903.357344] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1903.357362] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1903.361601] [ 1903.361912] CPU: 0 PID: 9608 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1903.362495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.363078] Call Trace: [ 1903.363265] [ 1903.363442] dump_stack_lvl+0xc1/0xf0 [ 1903.363739] should_fail_ex+0x4b4/0x5b0 [ 1903.364045] ? ptlock_alloc+0x21/0x70 [ 1903.364334] should_failslab+0x9/0x20 [ 1903.364616] kmem_cache_alloc+0x61/0x390 [ 1903.364926] ptlock_alloc+0x21/0x70 [ 1903.365208] pte_alloc_one+0x78/0x330 [ 1903.365506] __pte_alloc+0x6d/0x350 [ 1903.365775] ? __pfx___pte_alloc+0x10/0x10 [ 1903.366076] ? _raw_spin_unlock+0x1e/0x40 [ 1903.366394] ? __pmd_alloc+0x39f/0x8d0 [ 1903.366696] __handle_mm_fault+0x2382/0x2cc0 [ 1903.367019] ? mark_held_locks+0x9e/0xe0 [ 1903.367318] ? __pfx___handle_mm_fault+0x10/0x10 [ 1903.367689] handle_mm_fault+0x2c1/0xb10 [ 1903.367993] __get_user_pages+0x4a6/0x1300 [ 1903.368324] ? __pfx___get_user_pages+0x10/0x10 [ 1903.368651] ? lock_is_held_type+0x9f/0x120 [ 1903.368977] get_user_pages_remote+0x248/0x970 [ 1903.369327] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1903.369708] get_arg_page+0x12b/0x700 [ 1903.369994] ? __pfx_get_arg_page+0x10/0x10 [ 1903.370308] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1903.370658] ? count.constprop.0+0x1bb/0x290 [ 1903.370986] copy_string_kernel+0x196/0x4e0 [ 1903.371295] ? alloc_bprm+0x770/0xbb0 [ 1903.371579] do_execveat_common+0x4e7/0x8e0 [ 1903.371895] ? __pfx_do_execveat_common+0x10/0x10 [ 1903.372232] __x64_sys_execveat+0xe4/0x130 [ 1903.372544] do_syscall_64+0x3f/0x90 [ 1903.372805] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1903.373193] RIP: 0033:0x7f4229166b19 [ 1903.373470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.374740] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1903.375286] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1903.375787] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1903.376299] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1903.376812] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1903.377323] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1903.377839] [ 1903.384724] Bluetooth: Unexpected continuation frame (len 135) [ 1903.398786] FAULT_INJECTION: forcing a failure. [ 1903.398786] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.400222] CPU: 1 PID: 9605 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1903.401221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1903.402200] Call Trace: [ 1903.402523] [ 1903.402816] dump_stack_lvl+0xc1/0xf0 [ 1903.403310] should_fail_ex+0x4b4/0x5b0 [ 1903.403831] ? ptlock_alloc+0x21/0x70 [ 1903.404319] should_failslab+0x9/0x20 [ 1903.404805] kmem_cache_alloc+0x61/0x390 [ 1903.405357] ptlock_alloc+0x21/0x70 [ 1903.405829] pte_alloc_one+0x78/0x330 [ 1903.406329] __pte_alloc+0x6d/0x350 [ 1903.406794] ? __pfx___pte_alloc+0x10/0x10 [ 1903.407327] ? _raw_spin_unlock+0x1e/0x40 [ 1903.407863] ? __pmd_alloc+0x39f/0x8d0 [ 1903.408360] __handle_mm_fault+0x2382/0x2cc0 [ 1903.408915] ? __pfx_mt_find+0x10/0x10 [ 1903.409424] ? __pfx___handle_mm_fault+0x10/0x10 [ 1903.410038] ? find_vma+0x111/0x1b0 [ 1903.410496] ? follow_page_mask+0x235/0x19b0 [ 1903.411068] handle_mm_fault+0x2c1/0xb10 [ 1903.411585] __get_user_pages+0x4a6/0x1300 [ 1903.412144] ? __pfx___get_user_pages+0x10/0x10 [ 1903.412747] ? mas_store_prealloc+0xf4/0x160 [ 1903.413326] ? lock_is_held_type+0x9f/0x120 [ 1903.413884] get_user_pages_remote+0x248/0x970 [ 1903.414476] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1903.415131] ? alloc_bprm+0x648/0xbb0 [ 1903.415624] get_arg_page+0x12b/0x700 [ 1903.416145] ? __pfx_get_arg_page+0x10/0x10 [ 1903.416679] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1903.417294] ? count.constprop.0+0x1bb/0x290 [ 1903.417851] copy_string_kernel+0x196/0x4e0 [ 1903.418383] ? alloc_bprm+0x770/0xbb0 [ 1903.418870] do_execveat_common+0x4e7/0x8e0 [ 1903.419420] ? __pfx_do_execveat_common+0x10/0x10 [ 1903.420041] __x64_sys_execveat+0xe4/0x130 [ 1903.420578] do_syscall_64+0x3f/0x90 [ 1903.421056] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1903.421711] RIP: 0033:0x7fa4da37eb19 [ 1903.422184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1903.424343] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1903.425261] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1903.426110] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1903.426965] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1903.427812] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1903.428663] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1903.429559] 13:10:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaaaaaaaaa1204b3ed9fc9200200aaaaaaaa"], 0x110) 13:10:38 executing program 4: 13:10:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x0) 13:10:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 31) 13:10:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:10:38 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="22b010040000000100"], 0x9) r0 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x4, 0x47, 0x91, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffff47d, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0xba00, 0x3ff, 0x3, 0x5, 0x40, 0x80000000, 0xf55, 0x0, 0xffffffff, 0x0, 0xfffffffffffffc30}, 0x0, 0xb, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_generic(r7, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, 0x22, 0x8, 0x70bd25, 0x25dfdbfe, {0x17}, [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x75, 0x3e, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @fd=r0}, @generic="896794d969dbe7c508c1a4d568b2fa622509ef21072371f4a993a27fd196db0157fb0b768168abec65ca0bf4da6f2285ce5a0bcf90d160e33502d463f60ea2d954584891632cebfa45100063f140542d3650c95a7c252ca32e607ee98a5d8108e6", @typed={0x8, 0x95, 0x0, 0x0, @uid=r8}]}, @generic="5c279a85b4ffaa22ae301a0d86f34d9c76f936f3416d53290c592f9472fe5d882a7c8f80f596bd46a36af0b8d452f121fd9a3a9a9f158d27c562cb4993ca7abbff618e1578d54583695d39390f707b91a43702e507f259e6eb355e6cfb72246083995d6def0ffb14b9559c5fea0ede84bb20466a66d84ce81651fdb8d039dafa547de7678065744b9115e4ea092616a64de013ae19017a1e042d520b2e67ee10e82c78694ed5555f1c03315222f26a29c35c6cae52b2e5cf9d45f59269ff99f9c5610337979a887bc12483b0ccff19b4e9685aa83e"]}, 0x16c}, 0x1, 0x0, 0x0, 0x448cc}, 0x801) setsockopt$inet6_int(r6, 0x29, 0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x9, 0x7, 0x1, 0x0, 0xfffffffffffffa9a, 0x40, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x4, 0x6, 0x0, 0x4, 0x80000001, 0x9, 0x6, 0x0, 0xfffffbff, 0x0, 0x6}, r4, 0xf, r6, 0x8) 13:10:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 31) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:38 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 31) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 1916.375262] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1916.375300] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:10:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:10:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaaaaaaaaa1204b3ed9fc9200200aaaaaaaa"], 0x110) 13:10:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 32) 13:10:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x0) 13:10:38 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x0, 0x1, 0x63, 0x45}}}}, 0x15) 13:10:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:38 executing program 4: [ 1916.548010] FAULT_INJECTION: forcing a failure. [ 1916.548010] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.549436] CPU: 1 PID: 9641 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1916.549949] Bluetooth: Unexpected continuation frame (len 16) [ 1916.550428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.550447] Call Trace: [ 1916.552288] [ 1916.552584] dump_stack_lvl+0xc1/0xf0 [ 1916.553081] should_fail_ex+0x4b4/0x5b0 [ 1916.553636] ? __anon_vma_prepare+0x64/0x500 [ 1916.554195] should_failslab+0x9/0x20 [ 1916.554683] kmem_cache_alloc+0x61/0x390 [ 1916.555218] __anon_vma_prepare+0x64/0x500 [ 1916.555762] __handle_mm_fault+0x2611/0x2cc0 [ 1916.556330] ? __pfx_mt_find+0x10/0x10 [ 1916.556840] ? __pfx___handle_mm_fault+0x10/0x10 [ 1916.557475] ? find_vma+0x111/0x1b0 [ 1916.557949] ? follow_page_mask+0x235/0x19b0 [ 1916.558544] handle_mm_fault+0x2c1/0xb10 [ 1916.559087] __get_user_pages+0x4a6/0x1300 [ 1916.559663] ? __pfx___get_user_pages+0x10/0x10 [ 1916.560283] ? mas_store_prealloc+0xf4/0x160 [ 1916.560873] ? lock_is_held_type+0x9f/0x120 [ 1916.561461] get_user_pages_remote+0x248/0x970 [ 1916.562074] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1916.562748] ? alloc_bprm+0x648/0xbb0 [ 1916.563245] get_arg_page+0x12b/0x700 [ 1916.563746] ? __pfx_get_arg_page+0x10/0x10 [ 1916.564304] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1916.564915] ? count.constprop.0+0x1bb/0x290 [ 1916.565505] copy_string_kernel+0x196/0x4e0 [ 1916.566055] ? alloc_bprm+0x770/0xbb0 [ 1916.566558] do_execveat_common+0x4e7/0x8e0 [ 1916.567124] ? __pfx_do_execveat_common+0x10/0x10 [ 1916.567764] __x64_sys_execveat+0xe4/0x130 [ 1916.568316] do_syscall_64+0x3f/0x90 [ 1916.568811] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1916.569466] RIP: 0033:0x7fa4da37eb19 [ 1916.569956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.572154] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1916.573089] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1916.573993] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1916.574879] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1916.575757] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1916.576638] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1916.577556] [ 1916.578444] FAULT_INJECTION: forcing a failure. [ 1916.578444] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.580264] CPU: 0 PID: 9645 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1916.580966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1916.581674] Call Trace: [ 1916.581908] [ 1916.582114] dump_stack_lvl+0xc1/0xf0 [ 1916.582478] should_fail_ex+0x4b4/0x5b0 [ 1916.582850] ? __anon_vma_prepare+0x64/0x500 [ 1916.583250] should_failslab+0x9/0x20 [ 1916.583601] kmem_cache_alloc+0x61/0x390 [ 1916.583980] __anon_vma_prepare+0x64/0x500 [ 1916.584363] __handle_mm_fault+0x2611/0x2cc0 [ 1916.584763] ? __pfx_mt_find+0x10/0x10 [ 1916.585114] ? __pfx___handle_mm_fault+0x10/0x10 [ 1916.585556] ? find_vma+0x111/0x1b0 [ 1916.585890] ? follow_page_mask+0x235/0x19b0 [ 1916.586301] handle_mm_fault+0x2c1/0xb10 [ 1916.586675] __get_user_pages+0x4a6/0x1300 [ 1916.587071] ? __pfx___get_user_pages+0x10/0x10 [ 1916.587499] ? mas_store_prealloc+0xf4/0x160 [ 1916.587894] ? lock_is_held_type+0x9f/0x120 [ 1916.588290] get_user_pages_remote+0x248/0x970 [ 1916.588706] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1916.589163] ? alloc_bprm+0x648/0xbb0 [ 1916.589535] get_arg_page+0x12b/0x700 [ 1916.589879] ? __pfx_get_arg_page+0x10/0x10 [ 1916.590255] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1916.590670] ? count.constprop.0+0x1bb/0x290 [ 1916.591066] copy_string_kernel+0x196/0x4e0 [ 1916.591448] ? alloc_bprm+0x770/0xbb0 [ 1916.591796] do_execveat_common+0x4e7/0x8e0 [ 1916.592174] ? __pfx_do_execveat_common+0x10/0x10 [ 1916.592619] __x64_sys_execveat+0xe4/0x130 [ 1916.592999] do_syscall_64+0x3f/0x90 [ 1916.593344] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1916.593808] RIP: 0033:0x7f27b14f4b19 [ 1916.594140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1916.595661] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1916.596308] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1916.596911] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1916.597524] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1916.598129] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1916.598732] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1916.599357] [ 1916.599875] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1916.599898] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:10:50 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10d000, 0x141) 13:10:50 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:10:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 33) 13:10:50 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 33) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaaaaaaaaa1204b3ed9fc9200200aaaaaaaa"], 0x110) 13:10:50 executing program 4: 13:10:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) 13:10:50 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 32) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 1928.120377] FAULT_INJECTION: forcing a failure. [ 1928.120377] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.121806] CPU: 1 PID: 9654 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1928.122769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.123760] Call Trace: [ 1928.124087] [ 1928.124376] dump_stack_lvl+0xc1/0xf0 [ 1928.124875] should_fail_ex+0x4b4/0x5b0 [ 1928.125408] ? __anon_vma_prepare+0x64/0x500 [ 1928.125966] should_failslab+0x9/0x20 [ 1928.126457] kmem_cache_alloc+0x61/0x390 [ 1928.126993] __anon_vma_prepare+0x64/0x500 [ 1928.127533] __handle_mm_fault+0x2611/0x2cc0 [ 1928.128090] ? __pfx_mt_find+0x10/0x10 [ 1928.128582] ? __pfx___handle_mm_fault+0x10/0x10 [ 1928.129204] ? find_vma+0x111/0x1b0 [ 1928.129687] ? follow_page_mask+0x235/0x19b0 [ 1928.130263] handle_mm_fault+0x2c1/0xb10 [ 1928.130795] __get_user_pages+0x4a6/0x1300 [ 1928.131351] ? __pfx___get_user_pages+0x10/0x10 [ 1928.131966] ? mas_store_prealloc+0xf4/0x160 [ 1928.132540] ? lock_is_held_type+0x9f/0x120 [ 1928.133112] get_user_pages_remote+0x248/0x970 [ 1928.133726] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1928.134376] ? alloc_bprm+0x648/0xbb0 [ 1928.134879] get_arg_page+0x12b/0x700 [ 1928.135366] ? __pfx_get_arg_page+0x10/0x10 [ 1928.135912] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1928.136511] ? count.constprop.0+0x1bb/0x290 [ 1928.137083] copy_string_kernel+0x196/0x4e0 [ 1928.137641] ? alloc_bprm+0x770/0xbb0 [ 1928.138149] do_execveat_common+0x4e7/0x8e0 [ 1928.138708] ? __pfx_do_execveat_common+0x10/0x10 [ 1928.139340] __x64_sys_execveat+0xe4/0x130 [ 1928.139886] do_syscall_64+0x3f/0x90 [ 1928.140373] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1928.141032] RIP: 0033:0x7f4229166b19 [ 1928.141520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.143687] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1928.144604] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1928.145456] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1928.146298] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1928.147137] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1928.147986] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1928.148863] [ 1928.178954] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1928.178993] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1928.193526] Zero length message leads to an empty skb [ 1928.194903] Bluetooth: Unexpected continuation frame (len 4) [ 1928.203509] Bluetooth: Unexpected continuation frame (len 4) 13:10:50 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:10:50 executing program 4: syz_emit_vhci(0x0, 0x0) 13:10:50 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 33) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:10:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:10:50 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 34) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:10:50 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c91004001b400512a523377fe80aefd5907c614a5d4b8cbd069eec354bab187f7f5f1cea6d57077c33109bfe77913816c8cb5c49460c931b4fc78ffefa3c30410dab9a82f29a5417e2e432eefd94bfd59d4e89f57b4140987ecda7a18490607fc027125667ae8e030000000000000010b291146e0822e09cf99efd08992c6668e30705914eee853e1638283ec12226d6d7812673a702cd42", @ANYRES16], 0x9) 13:10:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) 13:10:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 34) 13:10:50 executing program 4: syz_emit_vhci(0x0, 0x0) [ 1928.364709] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1928.364752] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1928.404479] Bluetooth: Unexpected continuation frame (len 4) [ 1928.420456] FAULT_INJECTION: forcing a failure. [ 1928.420456] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.422550] CPU: 0 PID: 9683 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1928.423521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.424491] Call Trace: [ 1928.424810] [ 1928.425097] dump_stack_lvl+0xc1/0xf0 [ 1928.425589] should_fail_ex+0x4b4/0x5b0 [ 1928.426103] ? __anon_vma_prepare+0x26c/0x500 [ 1928.426666] should_failslab+0x9/0x20 [ 1928.427145] kmem_cache_alloc+0x61/0x390 [ 1928.427668] __anon_vma_prepare+0x26c/0x500 [ 1928.428210] __handle_mm_fault+0x2611/0x2cc0 [ 1928.428761] ? __pfx_mt_find+0x10/0x10 [ 1928.429246] ? __pfx___handle_mm_fault+0x10/0x10 [ 1928.429867] ? find_vma+0x111/0x1b0 [ 1928.430323] ? follow_page_mask+0x235/0x19b0 [ 1928.430889] handle_mm_fault+0x2c1/0xb10 [ 1928.431402] __get_user_pages+0x4a6/0x1300 [ 1928.431949] ? __pfx___get_user_pages+0x10/0x10 [ 1928.432542] ? mas_store_prealloc+0xf4/0x160 [ 1928.433096] ? lock_is_held_type+0x9f/0x120 [ 1928.433655] get_user_pages_remote+0x248/0x970 [ 1928.434233] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1928.434862] ? alloc_bprm+0x648/0xbb0 [ 1928.435350] get_arg_page+0x12b/0x700 [ 1928.435828] ? __pfx_get_arg_page+0x10/0x10 [ 1928.436355] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1928.436932] ? count.constprop.0+0x1bb/0x290 [ 1928.437490] copy_string_kernel+0x196/0x4e0 [ 1928.438018] ? alloc_bprm+0x770/0xbb0 [ 1928.438499] do_execveat_common+0x4e7/0x8e0 [ 1928.439030] ? __pfx_do_execveat_common+0x10/0x10 [ 1928.439639] __x64_sys_execveat+0xe4/0x130 [ 1928.440167] do_syscall_64+0x3f/0x90 [ 1928.440635] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1928.441263] RIP: 0033:0x7fa4da37eb19 [ 1928.441743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.443841] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1928.444734] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1928.445579] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1928.446416] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1928.447247] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1928.448084] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1928.448944] [ 1928.513574] FAULT_INJECTION: forcing a failure. [ 1928.513574] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.517584] CPU: 0 PID: 9682 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1928.518553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.519523] Call Trace: [ 1928.519845] [ 1928.520130] dump_stack_lvl+0xc1/0xf0 [ 1928.520607] should_fail_ex+0x4b4/0x5b0 [ 1928.521123] ? __anon_vma_prepare+0x26c/0x500 [ 1928.521695] should_failslab+0x9/0x20 [ 1928.522175] kmem_cache_alloc+0x61/0x390 [ 1928.522697] __anon_vma_prepare+0x26c/0x500 [ 1928.523241] __handle_mm_fault+0x2611/0x2cc0 [ 1928.523792] ? __pfx_mt_find+0x10/0x10 [ 1928.524285] ? __pfx___handle_mm_fault+0x10/0x10 [ 1928.524897] ? find_vma+0x111/0x1b0 [ 1928.525357] ? follow_page_mask+0x235/0x19b0 [ 1928.525948] handle_mm_fault+0x2c1/0xb10 [ 1928.526465] __get_user_pages+0x4a6/0x1300 [ 1928.527009] ? __pfx___get_user_pages+0x10/0x10 [ 1928.527605] ? mas_store_prealloc+0xf4/0x160 [ 1928.528162] ? lock_is_held_type+0x9f/0x120 [ 1928.528711] get_user_pages_remote+0x248/0x970 [ 1928.529299] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1928.529943] ? alloc_bprm+0x648/0xbb0 [ 1928.530432] get_arg_page+0x12b/0x700 [ 1928.530912] ? __pfx_get_arg_page+0x10/0x10 [ 1928.531436] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1928.532023] ? count.constprop.0+0x1bb/0x290 [ 1928.532580] copy_string_kernel+0x196/0x4e0 [ 1928.533111] ? alloc_bprm+0x770/0xbb0 [ 1928.533614] do_execveat_common+0x4e7/0x8e0 [ 1928.534151] ? __pfx_do_execveat_common+0x10/0x10 [ 1928.534771] __x64_sys_execveat+0xe4/0x130 [ 1928.535301] do_syscall_64+0x3f/0x90 [ 1928.535765] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1928.536394] RIP: 0033:0x7f27b14f4b19 [ 1928.536855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.538967] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1928.539876] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1928.540727] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1928.541579] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1928.542425] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1928.543271] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1928.544129] 13:11:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaaaaaaaaa1204b3ed9fc9200200aaaaaaaaaa1211412f59721019d0f792f069ca4b5c"], 0x110) 13:11:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:11:03 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 34) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:11:03 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xe}, {0x4, 0x1, 0x9, 0x8, [0x4, 0x0, 0x3]}}}}, 0x1b) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x1, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x8000, 0x1, 0x100, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="56000000a41c6297df05f718fc37372a672774e3d20fb93e56223ee928198d91d771b50c77c448fbbe6736ba239bfb66435a3aeece5cee1c24bedce60efd98a370d62b38e1e5e2540d0a54db0dbdcae12241dac2262594c39065317d3a28dcc99e476061e7a976bc5a89096b2b1438dd4a28f2351fed6c0ad2c5b384a040dbda27f61527b3ff3646d3415ff5ee9bdb47cf27a739c7717d84d307d2750174207711d7ab7e807cac8e174a44fa7deb5e17ac16c6926d", @ANYRES16=r2, @ANYBLOB="0100fcfffffffbdbdf250a000000040001801c00018008000100", @ANYRES32=r3, @ANYBLOB="080003000300000008000100", @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x0) copy_file_range(r0, &(0x7f0000000140), r1, &(0x7f0000000180)=0x8, 0x15, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x4, 0xf9, 0x5, 0x0, 0x8, 0xa0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x12020, 0x6, 0xfffffffb, 0x5, 0x81, 0x48, 0x6, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r5, 0x8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000400)) 13:11:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) 13:11:03 executing program 4: syz_emit_vhci(0x0, 0x0) 13:11:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 35) 13:11:03 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 35) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 1940.822145] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1940.822175] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:11:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 1940.852444] FAULT_INJECTION: forcing a failure. [ 1940.852444] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.853502] CPU: 0 PID: 9696 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1940.854058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1940.854612] Call Trace: [ 1940.854797] [ 1940.854957] dump_stack_lvl+0xc1/0xf0 [ 1940.855236] should_fail_ex+0x4b4/0x5b0 [ 1940.855531] ? __anon_vma_prepare+0x26c/0x500 [ 1940.855839] should_failslab+0x9/0x20 [ 1940.856119] kmem_cache_alloc+0x61/0x390 [ 1940.856415] __anon_vma_prepare+0x26c/0x500 [ 1940.856711] __handle_mm_fault+0x2611/0x2cc0 [ 1940.857029] ? __pfx_mt_find+0x10/0x10 [ 1940.857300] ? __pfx___handle_mm_fault+0x10/0x10 [ 1940.857662] ? find_vma+0x111/0x1b0 [ 1940.857915] ? follow_page_mask+0x235/0x19b0 [ 1940.858240] handle_mm_fault+0x2c1/0xb10 [ 1940.858526] __get_user_pages+0x4a6/0x1300 [ 1940.858825] ? __pfx___get_user_pages+0x10/0x10 [ 1940.859157] ? mas_store_prealloc+0xf4/0x160 [ 1940.859466] ? lock_is_held_type+0x9f/0x120 [ 1940.859782] get_user_pages_remote+0x248/0x970 [ 1940.860112] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1940.860468] ? alloc_bprm+0x648/0xbb0 [ 1940.860739] get_arg_page+0x12b/0x700 [ 1940.861003] ? __pfx_get_arg_page+0x10/0x10 [ 1940.861297] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1940.861622] ? count.constprop.0+0x1bb/0x290 [ 1940.861928] copy_string_kernel+0x196/0x4e0 [ 1940.862224] ? alloc_bprm+0x770/0xbb0 [ 1940.862495] do_execveat_common+0x4e7/0x8e0 [ 1940.862801] ? __pfx_do_execveat_common+0x10/0x10 [ 1940.863144] __x64_sys_execveat+0xe4/0x130 [ 1940.863440] do_syscall_64+0x3f/0x90 [ 1940.863698] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1940.864053] RIP: 0033:0x7f4229166b19 [ 1940.864309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1940.865506] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1940.866026] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1940.866525] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1940.867017] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1940.867518] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1940.868014] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1940.868537] [ 1940.881954] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1940.881976] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1940.888326] Bluetooth: Unexpected continuation frame (len 22) 13:11:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 36) 13:11:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0x0, 0x80, 0x1, "1eb401d81704796c"}}}, 0x10) [ 1940.976519] FAULT_INJECTION: forcing a failure. [ 1940.976519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1940.978252] CPU: 1 PID: 9712 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1940.979303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1940.980365] Call Trace: [ 1940.980712] [ 1940.981026] dump_stack_lvl+0xc1/0xf0 [ 1940.981577] should_fail_ex+0x4b4/0x5b0 [ 1940.982139] __should_fail_alloc_page+0xe0/0x110 [ 1940.982792] prepare_alloc_pages+0x178/0x500 [ 1940.983402] ? find_held_lock+0x2c/0x110 [ 1940.983972] __alloc_pages+0x149/0x480 [ 1940.984519] ? __pfx___alloc_pages+0x10/0x10 [ 1940.985128] ? lock_release+0x1e3/0x680 [ 1940.985673] ? __pfx_lock_release+0x10/0x10 [ 1940.986267] ? up_write+0x196/0x510 [ 1940.986781] vma_alloc_folio+0xe2/0x480 [ 1940.987330] __handle_mm_fault+0xfc4/0x2cc0 [ 1940.987909] ? __pfx_mt_find+0x10/0x10 [ 1940.988446] ? __pfx___handle_mm_fault+0x10/0x10 [ 1940.989108] ? find_vma+0x111/0x1b0 [ 1940.989513] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1940.989610] ? follow_page_mask+0x235/0x19b0 [ 1940.990055] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1940.990616] handle_mm_fault+0x2c1/0xb10 [ 1940.991664] __get_user_pages+0x4a6/0x1300 [ 1940.992282] ? __pfx___get_user_pages+0x10/0x10 [ 1940.992944] ? mas_store_prealloc+0xf4/0x160 [ 1940.993570] ? lock_is_held_type+0x9f/0x120 [ 1940.994180] get_user_pages_remote+0x248/0x970 [ 1940.994828] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1940.995532] ? alloc_bprm+0x648/0xbb0 [ 1940.996083] get_arg_page+0x12b/0x700 [ 1940.996617] ? __pfx_get_arg_page+0x10/0x10 [ 1940.997214] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1940.997867] ? count.constprop.0+0x1bb/0x290 [ 1940.998488] copy_string_kernel+0x196/0x4e0 [ 1940.999090] ? alloc_bprm+0x770/0xbb0 [ 1940.999632] do_execveat_common+0x4e7/0x8e0 [ 1941.000231] ? __pfx_do_execveat_common+0x10/0x10 [ 1941.000917] __x64_sys_execveat+0xe4/0x130 [ 1941.001518] do_syscall_64+0x3f/0x90 [ 1941.002073] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1941.002763] RIP: 0033:0x7fa4da37eb19 13:11:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) [ 1941.003277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1941.005727] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1941.006725] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1941.007649] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1941.008590] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1941.009509] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1941.010463] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1941.011396] 13:11:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) [ 1941.069295] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1941.069321] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1941.091129] Bluetooth: Unexpected continuation frame (len 22) 13:11:13 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 36) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:11:13 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 35) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:11:13 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x90, 0x7, 0x3f, 0x0, 0x0, 0x52f, 0x2, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x10, 0x2, 0x8, 0x8, 0x7ff, 0x8, 0x5, 0x0, 0xff, 0x0, 0x6}, 0x0, 0x3, r0, 0x1) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:11:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) 13:11:13 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0x0, 0x80, 0x1, "1eb401d81704796c"}}}, 0x10) 13:11:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 37) 13:11:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) 13:11:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 1951.502067] FAULT_INJECTION: forcing a failure. [ 1951.502067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1951.503651] CPU: 1 PID: 9731 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1951.504681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.505721] Call Trace: [ 1951.506060] [ 1951.506372] dump_stack_lvl+0xc1/0xf0 [ 1951.506897] should_fail_ex+0x4b4/0x5b0 [ 1951.507455] __should_fail_alloc_page+0xe0/0x110 [ 1951.508102] prepare_alloc_pages+0x178/0x500 [ 1951.508704] ? find_held_lock+0x2c/0x110 [ 1951.509268] __alloc_pages+0x149/0x480 [ 1951.509818] ? __pfx___alloc_pages+0x10/0x10 [ 1951.510426] ? lock_release+0x1e3/0x680 [ 1951.510963] ? __pfx_lock_release+0x10/0x10 [ 1951.511546] ? up_write+0x196/0x510 [ 1951.512052] vma_alloc_folio+0xe2/0x480 [ 1951.512594] __handle_mm_fault+0xfc4/0x2cc0 [ 1951.513163] ? __pfx_mt_find+0x10/0x10 [ 1951.513712] ? __pfx___handle_mm_fault+0x10/0x10 [ 1951.514362] ? find_vma+0x111/0x1b0 [ 1951.514867] ? follow_page_mask+0x235/0x19b0 [ 1951.515476] handle_mm_fault+0x2c1/0xb10 [ 1951.516054] __get_user_pages+0x4a6/0x1300 [ 1951.516667] ? __pfx___get_user_pages+0x10/0x10 [ 1951.517317] ? mas_store_prealloc+0xf4/0x160 [ 1951.517922] ? lock_is_held_type+0x9f/0x120 [ 1951.518549] get_user_pages_remote+0x248/0x970 [ 1951.519203] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1951.519912] ? alloc_bprm+0x648/0xbb0 [ 1951.520455] get_arg_page+0x12b/0x700 [ 1951.520990] ? __pfx_get_arg_page+0x10/0x10 [ 1951.521560] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1951.522209] ? count.constprop.0+0x1bb/0x290 [ 1951.522827] copy_string_kernel+0x196/0x4e0 [ 1951.523427] ? alloc_bprm+0x770/0xbb0 [ 1951.523973] do_execveat_common+0x4e7/0x8e0 [ 1951.524591] ? __pfx_do_execveat_common+0x10/0x10 [ 1951.525276] __x64_sys_execveat+0xe4/0x130 [ 1951.525864] do_syscall_64+0x3f/0x90 [ 1951.526383] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1951.527071] RIP: 0033:0x7f27b14f4b19 [ 1951.527579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.529867] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1951.530871] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1951.531809] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1951.532752] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1951.533705] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1951.534646] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1951.535609] [ 1951.537518] FAULT_INJECTION: forcing a failure. [ 1951.537518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.538507] CPU: 0 PID: 9741 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1951.539066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.539639] Call Trace: [ 1951.539823] [ 1951.539990] dump_stack_lvl+0xc1/0xf0 [ 1951.540278] should_fail_ex+0x4b4/0x5b0 [ 1951.540583] _copy_from_user+0x30/0xf0 [ 1951.540881] copy_strings.isra.0+0x210/0x850 [ 1951.541212] do_execveat_common+0x5db/0x8e0 [ 1951.541523] ? __pfx_do_execveat_common+0x10/0x10 [ 1951.541868] __x64_sys_execveat+0xe4/0x130 [ 1951.542163] do_syscall_64+0x3f/0x90 [ 1951.542424] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1951.542780] RIP: 0033:0x7fa4da37eb19 [ 1951.543028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.544204] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1951.544698] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1951.545168] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1951.545635] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1951.546113] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1951.546574] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1951.547050] [ 1951.562397] Bluetooth: Unexpected continuation frame (len 4) [ 1951.562831] Bluetooth: Unexpected continuation frame (len 4) [ 1951.570124] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1951.570145] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:11:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:11:14 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 36) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:11:14 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0x0, 0x80, 0x1, "1eb401d81704796c"}}}, 0x10) 13:11:14 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8}, "826339881adc92e06b9e7502ca0dfad0adfa779d38b7fd"}, 0xffffffffffffff07) 13:11:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) 13:11:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 38) 13:11:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) [ 1951.664220] FAULT_INJECTION: forcing a failure. [ 1951.664220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1951.665809] CPU: 1 PID: 9751 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1951.666837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.667862] Call Trace: [ 1951.668206] [ 1951.668518] dump_stack_lvl+0xc1/0xf0 [ 1951.669040] should_fail_ex+0x4b4/0x5b0 [ 1951.669605] __should_fail_alloc_page+0xe0/0x110 [ 1951.670261] prepare_alloc_pages+0x178/0x500 [ 1951.670869] ? find_held_lock+0x2c/0x110 [ 1951.671435] __alloc_pages+0x149/0x480 [ 1951.671972] ? __pfx___alloc_pages+0x10/0x10 [ 1951.672576] ? lock_release+0x1e3/0x680 [ 1951.673116] ? __pfx_lock_release+0x10/0x10 [ 1951.673711] ? up_write+0x196/0x510 [ 1951.674216] vma_alloc_folio+0xe2/0x480 [ 1951.674760] __handle_mm_fault+0xfc4/0x2cc0 [ 1951.675339] ? __pfx_mt_find+0x10/0x10 [ 1951.675862] ? __pfx___handle_mm_fault+0x10/0x10 [ 1951.676509] ? find_vma+0x111/0x1b0 [ 1951.676996] ? follow_page_mask+0x235/0x19b0 [ 1951.677605] handle_mm_fault+0x2c1/0xb10 [ 1951.678180] __get_user_pages+0x4a6/0x1300 [ 1951.678767] ? __pfx___get_user_pages+0x10/0x10 [ 1951.679396] ? mas_store_prealloc+0xf4/0x160 [ 1951.680003] ? lock_is_held_type+0x9f/0x120 [ 1951.680591] get_user_pages_remote+0x248/0x970 [ 1951.681239] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1951.681923] ? alloc_bprm+0x648/0xbb0 [ 1951.682465] get_arg_page+0x12b/0x700 [ 1951.682976] ? __pfx_get_arg_page+0x10/0x10 [ 1951.683560] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1951.684180] ? count.constprop.0+0x1bb/0x290 [ 1951.684792] copy_string_kernel+0x196/0x4e0 [ 1951.685358] ? alloc_bprm+0x770/0xbb0 [ 1951.685934] do_execveat_common+0x4e7/0x8e0 [ 1951.686532] ? __pfx_do_execveat_common+0x10/0x10 [ 1951.687211] __x64_sys_execveat+0xe4/0x130 [ 1951.687802] do_syscall_64+0x3f/0x90 [ 1951.688329] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1951.689013] RIP: 0033:0x7f4229166b19 [ 1951.689524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.691809] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1951.692817] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1951.693788] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1951.694718] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1951.695652] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1951.696587] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1951.697548] 13:11:14 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 37) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:11:14 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="ac54a8466d9fbeef632407bfcbf9114d6c03306bd6d4ea41bf288cc17912b623b94c126c43e2a234bd4cf456bc7d1e9e82511121016a9d590e8030d3c691798f89d46aea281cb2c5c23a0345c6584b8e3b51a40790d34184d2e12b038b7cd3f6ff5e030f572b026c45258409f24d2abfda05c0cb81ff2b07c394d7a564de7c29c805a0f8d7b4ec7b1b3e7e336b09b9f90e96d010d81119f48c5e508f3e", 0x9d) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) [ 1951.721766] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1951.721793] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:11:14 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:11:14 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3f, 0x0, 0x0, 0x1, "1eb401d81704796c"}}}, 0x10) 13:11:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) [ 1951.764548] FAULT_INJECTION: forcing a failure. [ 1951.764548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.765410] CPU: 0 PID: 9760 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1951.765955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.766492] Call Trace: [ 1951.766683] [ 1951.766844] dump_stack_lvl+0xc1/0xf0 [ 1951.767118] should_fail_ex+0x4b4/0x5b0 [ 1951.767405] _copy_from_user+0x30/0xf0 [ 1951.767701] copy_strings.isra.0+0x210/0x850 [ 1951.768017] do_execveat_common+0x5db/0x8e0 [ 1951.768311] ? __pfx_do_execveat_common+0x10/0x10 [ 1951.768652] __x64_sys_execveat+0xe4/0x130 [ 1951.768959] do_syscall_64+0x3f/0x90 [ 1951.769226] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1951.769579] RIP: 0033:0x7fa4da37eb19 [ 1951.769853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.771022] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1951.771524] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1951.772006] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1951.772479] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1951.772958] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1951.773426] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1951.773919] 13:11:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) [ 1951.780253] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1951.780274] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 1951.785307] Bluetooth: Unexpected continuation frame (len 4) [ 1951.785773] Bluetooth: Unexpected continuation frame (len 4) [ 1951.802263] FAULT_INJECTION: forcing a failure. [ 1951.802263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.804260] CPU: 0 PID: 9770 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1951.804797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.805336] Call Trace: [ 1951.805514] [ 1951.805682] dump_stack_lvl+0xc1/0xf0 [ 1951.805956] should_fail_ex+0x4b4/0x5b0 [ 1951.806237] _copy_from_user+0x30/0xf0 [ 1951.806515] copy_strings.isra.0+0x210/0x850 [ 1951.806831] do_execveat_common+0x5db/0x8e0 [ 1951.807130] ? __pfx_do_execveat_common+0x10/0x10 [ 1951.807483] __x64_sys_execveat+0xe4/0x130 [ 1951.807778] do_syscall_64+0x3f/0x90 [ 1951.808037] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1951.808391] RIP: 0033:0x7f27b14f4b19 [ 1951.808650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.809832] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1951.810333] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1951.810801] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1951.811269] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1951.811735] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1951.812242] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1951.812755] 13:11:14 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 1951.875039] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1951.875063] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:11:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) 13:11:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) 13:11:27 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 37) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:11:27 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:11:27 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3f, 0x0, 0x0, 0x0, "1eb401d81704796c"}}}, 0x10) 13:11:27 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='.#[}\x00') syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c918040000000100"], 0x9) 13:11:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 39) 13:11:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 1964.836009] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1964.836055] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1964.842222] FAULT_INJECTION: forcing a failure. [ 1964.842222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1964.843188] CPU: 1 PID: 9784 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1964.843820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.844468] Call Trace: [ 1964.844676] [ 1964.844859] dump_stack_lvl+0xc1/0xf0 [ 1964.845183] should_fail_ex+0x4b4/0x5b0 [ 1964.845526] _copy_from_user+0x30/0xf0 [ 1964.845871] copy_strings.isra.0+0x210/0x850 [ 1964.846243] do_execveat_common+0x675/0x8e0 [ 1964.846598] ? __pfx_do_execveat_common+0x10/0x10 [ 1964.847002] __x64_sys_execveat+0xe4/0x130 [ 1964.847354] do_syscall_64+0x3f/0x90 [ 1964.847667] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1964.848099] RIP: 0033:0x7fa4da37eb19 [ 1964.848399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.849830] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1964.850433] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1964.850998] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1964.851556] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1964.852122] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1964.852693] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1964.853266] 13:11:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) [ 1964.898732] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1964.898775] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1964.908860] Bluetooth: hci7: ACL packet for unknown connection handle 2249 13:11:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 40) [ 1964.911228] FAULT_INJECTION: forcing a failure. [ 1964.911228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1964.912153] CPU: 1 PID: 9794 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1964.912760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.913368] Call Trace: [ 1964.913566] [ 1964.913742] dump_stack_lvl+0xc1/0xf0 [ 1964.914066] should_fail_ex+0x4b4/0x5b0 [ 1964.914386] _copy_from_user+0x30/0xf0 [ 1964.914702] copy_strings.isra.0+0x210/0x850 [ 1964.915034] do_execveat_common+0x5db/0x8e0 [ 1964.915373] ? __pfx_do_execveat_common+0x10/0x10 [ 1964.915738] __x64_sys_execveat+0xe4/0x130 [ 1964.916077] do_syscall_64+0x3f/0x90 [ 1964.916369] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1964.916757] RIP: 0033:0x7f27b14f4b19 [ 1964.917031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.918352] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1964.918900] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1964.919433] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1964.919960] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1964.920486] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1964.921004] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1964.921546] [ 1964.925920] Bluetooth: hci7: ACL packet for unknown connection handle 2249 [ 1964.937242] FAULT_INJECTION: forcing a failure. [ 1964.937242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1964.938116] CPU: 1 PID: 9799 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1964.938704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.939273] Call Trace: [ 1964.939472] [ 1964.939642] dump_stack_lvl+0xc1/0xf0 [ 1964.939929] should_fail_ex+0x4b4/0x5b0 [ 1964.940244] _copy_from_user+0x30/0xf0 [ 1964.940549] copy_strings.isra.0+0x210/0x850 [ 1964.940890] do_execveat_common+0x5db/0x8e0 [ 1964.941216] ? __pfx_do_execveat_common+0x10/0x10 [ 1964.941600] __x64_sys_execveat+0xe4/0x130 [ 1964.941946] do_syscall_64+0x3f/0x90 [ 1964.942233] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1964.942624] RIP: 0033:0x7f4229166b19 [ 1964.942891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.944177] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1964.944707] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1964.945203] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1964.945702] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1964.946195] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 13:11:27 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 1964.946681] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1964.947316] 13:11:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:11:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) [ 1964.995290] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 1964.995337] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:11:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) 13:11:27 executing program 6: llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/166, 0xa6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) [ 1965.015487] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1965.015530] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:11:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) [ 1965.091450] FAULT_INJECTION: forcing a failure. [ 1965.091450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.094294] CPU: 0 PID: 9802 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1965.095303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.096310] Call Trace: [ 1965.096640] [ 1965.096943] dump_stack_lvl+0xc1/0xf0 [ 1965.097459] should_fail_ex+0x4b4/0x5b0 [ 1965.098035] _copy_from_user+0x30/0xf0 [ 1965.098564] copy_strings.isra.0+0x210/0x850 [ 1965.099154] do_execveat_common+0x675/0x8e0 [ 1965.099723] ? __pfx_do_execveat_common+0x10/0x10 [ 1965.100367] __x64_sys_execveat+0xe4/0x130 [ 1965.100936] do_syscall_64+0x3f/0x90 [ 1965.101441] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1965.102125] RIP: 0033:0x7fa4da37eb19 [ 1965.102625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.104808] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1965.105771] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1965.106649] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1965.107528] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1965.108399] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1965.109264] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1965.110184] 13:11:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) [ 1965.119711] Bluetooth: Unexpected continuation frame (len 4) [ 1965.120705] Bluetooth: Unexpected continuation frame (len 4) [ 1965.143166] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 1965.143205] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 1965.196114] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1965.196151] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:11:45 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 39) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) 13:11:45 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 38) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:11:45 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x7ff, 0x6}}}}, 0x11) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xff, 0x4, 0x1, 0x8, 0x0, 0x3, 0x802, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x18414, 0x5, 0x8, 0x0, 0x8, 0x2, 0x560, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x2, r0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:11:45 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) 13:11:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 41) 13:11:45 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:11:45 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) [ 1983.221131] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 1983.221161] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) [ 1983.238037] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1983.238064] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 1983.241844] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1983.241863] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1983.246259] FAULT_INJECTION: forcing a failure. [ 1983.246259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1983.247395] CPU: 1 PID: 9832 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1983.248139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.248875] Call Trace: [ 1983.249122] [ 1983.249344] dump_stack_lvl+0xc1/0xf0 [ 1983.249706] should_fail_ex+0x4b4/0x5b0 [ 1983.250097] _copy_from_user+0x30/0xf0 [ 1983.250475] copy_strings.isra.0+0x210/0x850 [ 1983.250894] do_execveat_common+0x675/0x8e0 [ 1983.251290] ? __pfx_do_execveat_common+0x10/0x10 [ 1983.251757] __x64_sys_execveat+0xe4/0x130 [ 1983.252137] do_syscall_64+0x3f/0x90 [ 1983.252497] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1983.252966] RIP: 0033:0x7fa4da37eb19 [ 1983.253305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.254913] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1983.255567] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1983.256195] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1983.256816] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1983.257444] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1983.258079] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1983.258751] [ 1983.264915] Bluetooth: Unexpected continuation frame (len 12) [ 1983.265422] Bluetooth: Unexpected continuation frame (len 12) [ 1983.268521] FAULT_INJECTION: forcing a failure. [ 1983.268521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1983.269652] CPU: 1 PID: 9835 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1983.270364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.271082] Call Trace: [ 1983.271310] [ 1983.271527] dump_stack_lvl+0xc1/0xf0 [ 1983.271881] should_fail_ex+0x4b4/0x5b0 [ 1983.272262] _copy_from_user+0x30/0xf0 [ 1983.272640] copy_strings.isra.0+0x210/0x850 [ 1983.273059] do_execveat_common+0x5db/0x8e0 [ 1983.273460] ? __pfx_do_execveat_common+0x10/0x10 [ 1983.273907] __x64_sys_execveat+0xe4/0x130 [ 1983.274310] do_syscall_64+0x3f/0x90 [ 1983.274667] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1983.275149] RIP: 0033:0x7f27b14f4b19 [ 1983.275498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.277133] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1983.277789] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1983.278450] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1983.279110] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1983.279759] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1983.280404] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1983.281067] [ 1983.312464] FAULT_INJECTION: forcing a failure. [ 1983.312464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1983.313580] CPU: 1 PID: 9837 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1983.314310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.315032] Call Trace: [ 1983.315258] [ 1983.315471] dump_stack_lvl+0xc1/0xf0 [ 1983.315839] should_fail_ex+0x4b4/0x5b0 [ 1983.316218] _copy_from_user+0x30/0xf0 [ 1983.316601] copy_strings.isra.0+0x210/0x850 [ 1983.317014] do_execveat_common+0x5db/0x8e0 [ 1983.317403] ? __pfx_do_execveat_common+0x10/0x10 [ 1983.317872] __x64_sys_execveat+0xe4/0x130 [ 1983.318274] do_syscall_64+0x3f/0x90 [ 1983.318633] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1983.319107] RIP: 0033:0x7f4229166b19 [ 1983.319439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.320977] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1983.321643] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1983.322268] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1983.322884] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1983.323509] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1983.324128] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1983.324779] 13:11:59 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 39) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:11:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 42) 13:11:59 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) 13:11:59 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:11:59 executing program 4: 13:11:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:11:59 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000000300)=""/196, 0xc4}], 0x5}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)=""/41, 0x29}], 0x1}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000000740)=""/9, 0x9}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/180, 0xb4}, {&(0x7f00000008c0)=""/9, 0x9}], 0x6, &(0x7f0000000980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x3, 0x8001, &(0x7f0000000ac0)) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x0, 0x80, 0x1, 0x0, 0x0, 0x50800, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x20}, 0x4008, 0x3, 0x20, 0x2, 0xfffffffffffeffff, 0x40000000, 0x888, 0x0, 0x5, 0x0, 0x5ecebf3c}, r0, 0xf, r1, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}]}, 0x24}}, 0x0) [ 1996.773984] FAULT_INJECTION: forcing a failure. [ 1996.773984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.775653] CPU: 1 PID: 9846 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1996.776648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.777660] Call Trace: [ 1996.777999] [ 1996.778314] dump_stack_lvl+0xc1/0xf0 [ 1996.778807] should_fail_ex+0x4b4/0x5b0 [ 1996.779363] _copy_from_user+0x30/0xf0 [ 1996.779890] copy_strings.isra.0+0x210/0x850 [ 1996.780462] do_execveat_common+0x5db/0x8e0 [ 1996.781036] ? __pfx_do_execveat_common+0x10/0x10 [ 1996.781663] __x64_sys_execveat+0xe4/0x130 [ 1996.782213] do_syscall_64+0x3f/0x90 [ 1996.782704] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1996.783362] RIP: 0033:0x7f4229166b19 [ 1996.783840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.786041] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1996.786992] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1996.787878] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1996.788735] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1996.789622] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1996.790522] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1996.791414] [ 1996.829882] FAULT_INJECTION: forcing a failure. [ 1996.829882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.831394] CPU: 1 PID: 9848 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1996.832403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.833439] Call Trace: [ 1996.833764] [ 1996.834073] dump_stack_lvl+0xc1/0xf0 [ 1996.834584] should_fail_ex+0x4b4/0x5b0 [ 1996.835126] _copy_from_user+0x30/0xf0 [ 1996.835634] copy_strings.isra.0+0x210/0x850 [ 1996.836217] do_execveat_common+0x5db/0x8e0 [ 1996.836762] ? __pfx_do_execveat_common+0x10/0x10 [ 1996.837408] __x64_sys_execveat+0xe4/0x130 [ 1996.837981] do_syscall_64+0x3f/0x90 [ 1996.838483] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1996.839163] RIP: 0033:0x7f27b14f4b19 [ 1996.839628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.840120] Bluetooth: Unexpected continuation frame (len 4) [ 1996.841769] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1996.841803] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 1996.844296] Bluetooth: Unexpected continuation frame (len 4) [ 1996.845009] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1996.845033] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1996.845052] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1996.847653] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 1996.848544] 13:11:59 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 40) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 1996.864513] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1996.864554] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1996.866810] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1996.866844] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 1996.914270] FAULT_INJECTION: forcing a failure. [ 1996.914270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.915790] CPU: 1 PID: 9857 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1996.916867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.918147] Call Trace: [ 1996.918581] [ 1996.918919] dump_stack_lvl+0xc1/0xf0 [ 1996.919438] should_fail_ex+0x4b4/0x5b0 [ 1996.920005] _copy_from_user+0x30/0xf0 [ 1996.920543] copy_strings.isra.0+0x210/0x850 [ 1996.921164] do_execveat_common+0x675/0x8e0 [ 1996.921749] ? __pfx_do_execveat_common+0x10/0x10 [ 1996.922456] __x64_sys_execveat+0xe4/0x130 [ 1996.923053] do_syscall_64+0x3f/0x90 [ 1996.923554] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1996.924261] RIP: 0033:0x7fa4da37eb19 [ 1996.924742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.927088] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1996.928074] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 1996.929017] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1996.929950] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 1996.930857] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1996.931763] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 1996.932693] 13:11:59 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4b}, "838030bf73fdf85b52a21412895e1d7a76dc3d5c46460450bee81ecb3005e141904e0654f68036e62bc32fd5c3cad23a7ea399773c25aba07b7072f79dd4b849a7b209e9b35c8016310a45"}, 0x4f) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 13:11:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13:11:59 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) 13:11:59 executing program 4: [ 1997.003076] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 1997.003126] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 1997.017123] FAULT_INJECTION: forcing a failure. [ 1997.017123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1997.018724] CPU: 1 PID: 9863 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 1997.019867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1997.020935] Call Trace: [ 1997.021283] [ 1997.021592] dump_stack_lvl+0xc1/0xf0 [ 1997.022131] should_fail_ex+0x4b4/0x5b0 [ 1997.022694] _copy_from_user+0x30/0xf0 [ 1997.023246] copy_strings.isra.0+0x210/0x850 [ 1997.023861] do_execveat_common+0x5db/0x8e0 [ 1997.024433] ? __pfx_do_execveat_common+0x10/0x10 [ 1997.025118] __x64_sys_execveat+0xe4/0x130 [ 1997.025686] do_syscall_64+0x3f/0x90 [ 1997.026193] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1997.026910] RIP: 0033:0x7f4229166b19 [ 1997.027397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1997.029712] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1997.030709] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 1997.031623] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1997.032555] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 1997.033504] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 1997.034442] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 1997.035373] [ 1997.102351] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 1997.102397] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:12:12 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 41) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:12:12 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 41) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:12:12 executing program 4: 13:12:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13:12:12 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x0, 0x3, 0x8, 0x0, 0x6, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x3, 0x5}, 0x0, 0x9, 0x5, 0x7, 0x4, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x400}, 0x0, 0x6, r0, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c94188050000e82f242660b224d4d19afe531a93dabc36c8cfd2f82e4193f1a97c3569cf676c67789423adffd4eb90e5c0233448bff060a64d682e293ca29ca09d9883f6cb2252641aff7f1c335c13e3102d92b09a2cab653fbb786df71143040194d515832535ae0519455f314768833bdacb558fd1226a416025dfd4596a2a07cafc93d6a2f9037b9dda4bb827edcee919f8b6c07f117fead9c7e6293487a11f6a05e1001024c72f6c33e2409f8c7d513b00000000aee4e0c9cdaabf8dc4d5d47de6f2eb6def8233d3abdfd1e1388bd43cf7ae5667ece0ffc94e9b101af512fcb679cd83d7"], 0x9) r2 = fcntl$getown(r1, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x1d, 0x0, 0x0) write(r4, &(0x7f0000000140)="e12e9b795d7d5a748bdaa61ddd2e398b7f100f307a", 0x15) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9f, 0x3f, 0x3f, 0x6, 0x0, 0x0, 0x10a00, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x4, 0x9, 0xff, 0x1, 0xfff, 0xffff, 0x84, 0x0, 0x8, 0x0, 0x7}, r2, 0xf, r4, 0x2) 13:12:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) 13:12:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 43) [ 2009.719342] Bluetooth: hci7: ACL packet for unknown connection handle 457 [ 2009.722779] Bluetooth: hci7: ACL packet for unknown connection handle 457 [ 2009.740987] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2009.741009] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2009.741463] FAULT_INJECTION: forcing a failure. [ 2009.741463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.743691] CPU: 1 PID: 9880 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2009.744831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.745995] Call Trace: [ 2009.746386] [ 2009.746728] dump_stack_lvl+0xc1/0xf0 [ 2009.747315] should_fail_ex+0x4b4/0x5b0 [ 2009.747936] _copy_from_user+0x30/0xf0 [ 2009.748529] copy_strings.isra.0+0x210/0x850 [ 2009.749199] do_execveat_common+0x5db/0x8e0 [ 2009.749835] ? __pfx_do_execveat_common+0x10/0x10 [ 2009.750583] __x64_sys_execveat+0xe4/0x130 [ 2009.751206] do_syscall_64+0x3f/0x90 [ 2009.751756] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2009.752501] RIP: 0033:0x7f4229166b19 13:12:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) [ 2009.753059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.755751] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2009.756848] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2009.757887] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2009.758927] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2009.759966] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2009.760978] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2009.762019] [ 2009.770338] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2009.770360] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:12:12 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c91004000000122322e6a2dc45be04182d34281885559b98fa4317ad6912b601720820930a6870d39dcf6c8f2da7e76e"], 0x9) 13:12:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) [ 2009.804374] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2009.804395] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2009.805510] Bluetooth: Unexpected continuation frame (len 4) [ 2009.816797] FAULT_INJECTION: forcing a failure. [ 2009.816797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.818622] CPU: 1 PID: 9894 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2009.819778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.820954] Call Trace: [ 2009.821331] [ 2009.821681] dump_stack_lvl+0xc1/0xf0 [ 2009.822268] should_fail_ex+0x4b4/0x5b0 [ 2009.822902] _copy_from_user+0x30/0xf0 [ 2009.823505] copy_strings.isra.0+0x210/0x850 [ 2009.824167] do_execveat_common+0x675/0x8e0 [ 2009.824800] ? __pfx_do_execveat_common+0x10/0x10 [ 2009.825525] __x64_sys_execveat+0xe4/0x130 [ 2009.826158] do_syscall_64+0x3f/0x90 [ 2009.826719] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2009.827461] RIP: 0033:0x7f27b14f4b19 [ 2009.827997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.830502] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2009.831559] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2009.832549] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2009.833541] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2009.834540] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2009.835536] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2009.836551] [ 2009.840463] Bluetooth: Unexpected continuation frame (len 4) [ 2009.852229] FAULT_INJECTION: forcing a failure. [ 2009.852229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.853899] CPU: 1 PID: 9897 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2009.855050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.856196] Call Trace: [ 2009.856574] [ 2009.856913] dump_stack_lvl+0xc1/0xf0 [ 2009.857482] should_fail_ex+0x4b4/0x5b0 [ 2009.858090] _copy_from_user+0x30/0xf0 [ 2009.858704] copy_strings.isra.0+0x210/0x850 [ 2009.859370] do_execveat_common+0x675/0x8e0 [ 2009.860009] ? __pfx_do_execveat_common+0x10/0x10 13:12:12 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1d}, @l2cap_cid_signaling={{0x19}, [@l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x0, 0x5eda, 0x1}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x0, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x4, 0x2}}]}}, 0x22) [ 2009.860729] __x64_sys_execveat+0xe4/0x130 [ 2009.861559] do_syscall_64+0x3f/0x90 [ 2009.862117] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2009.862872] RIP: 0033:0x7fa4da37eb19 [ 2009.863416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.865936] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2009.867041] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2009.868044] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2009.869055] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2009.870067] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2009.871088] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2009.872119] [ 2009.894276] Bluetooth: Unexpected continuation frame (len 29) [ 2009.895048] Bluetooth: Unexpected continuation frame (len 29) [ 2009.904164] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2009.904185] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13:12:12 executing program 4: syz_emit_vhci(0x0, 0x110) 13:12:12 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 42) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:12:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) [ 2009.999455] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2009.999485] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2010.005504] FAULT_INJECTION: forcing a failure. [ 2010.005504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.006552] CPU: 0 PID: 9908 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2010.007093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.007617] Call Trace: [ 2010.007792] [ 2010.007950] dump_stack_lvl+0xc1/0xf0 [ 2010.008223] should_fail_ex+0x4b4/0x5b0 [ 2010.008511] _copy_from_user+0x30/0xf0 [ 2010.008786] copy_strings.isra.0+0x210/0x850 [ 2010.009097] do_execveat_common+0x5db/0x8e0 [ 2010.009393] ? __pfx_do_execveat_common+0x10/0x10 [ 2010.009727] __x64_sys_execveat+0xe4/0x130 [ 2010.010020] do_syscall_64+0x3f/0x90 [ 2010.010274] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2010.010638] RIP: 0033:0x7f4229166b19 [ 2010.010882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.012040] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2010.012535] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2010.013001] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2010.013466] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2010.013931] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2010.014402] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2010.014856] 13:12:23 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 42) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:12:23 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x1, 0x3, 0x23, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcb7d, 0x1, @perf_config_ext={0x1, 0x3}, 0x40000, 0x7f, 0x6, 0x2, 0x7, 0x26f, 0x9, 0x0, 0x0, 0x0, 0x7}, r0, 0xc, 0xffffffffffffffff, 0x1) 13:12:23 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 43) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:12:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) 13:12:23 executing program 4: syz_emit_vhci(0x0, 0x110) 13:12:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 44) 13:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}}, 0x0) [ 2021.577481] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2021.577510] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2021.588251] FAULT_INJECTION: forcing a failure. [ 2021.588251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.589234] CPU: 0 PID: 9919 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2021.589768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.590295] Call Trace: [ 2021.590477] [ 2021.590643] dump_stack_lvl+0xc1/0xf0 [ 2021.590917] should_fail_ex+0x4b4/0x5b0 [ 2021.591199] _copy_from_user+0x30/0xf0 [ 2021.591492] copy_strings.isra.0+0x210/0x850 [ 2021.591803] do_execveat_common+0x5db/0x8e0 [ 2021.592108] ? __pfx_do_execveat_common+0x10/0x10 [ 2021.592446] __x64_sys_execveat+0xe4/0x130 [ 2021.592734] do_syscall_64+0x3f/0x90 [ 2021.592994] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2021.593355] RIP: 0033:0x7f4229166b19 [ 2021.593614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.594782] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2021.595287] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2021.595788] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2021.596306] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2021.596830] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2021.597341] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2021.597871] 13:12:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) [ 2021.616350] Bluetooth: Unexpected continuation frame (len 4) [ 2021.617110] Bluetooth: Unexpected continuation frame (len 4) [ 2021.632561] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2021.632582] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2021.639734] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2021.639754] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2021.659259] FAULT_INJECTION: forcing a failure. [ 2021.659259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.660862] CPU: 1 PID: 9929 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2021.662097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.663131] Call Trace: [ 2021.663536] [ 2021.663837] dump_stack_lvl+0xc1/0xf0 [ 2021.664339] should_fail_ex+0x4b4/0x5b0 [ 2021.664875] _copy_from_user+0x30/0xf0 13:12:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) 13:12:24 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x45e, 0x18200) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c9100400000000ef"], 0x9) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x7, 0x3, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x4000081) [ 2021.665411] copy_strings.isra.0+0x210/0x850 [ 2021.666213] do_execveat_common+0x675/0x8e0 [ 2021.666902] ? __pfx_do_execveat_common+0x10/0x10 [ 2021.667679] __x64_sys_execveat+0xe4/0x130 [ 2021.668329] do_syscall_64+0x3f/0x90 [ 2021.668828] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2021.669660] RIP: 0033:0x7f27b14f4b19 13:12:24 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 44) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2021.670137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.672818] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2021.673751] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2021.674633] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2021.675509] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2021.676384] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2021.677269] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2021.678159] [ 2021.683178] FAULT_INJECTION: forcing a failure. [ 2021.683178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.684719] CPU: 1 PID: 9931 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2021.685708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.686724] Call Trace: [ 2021.687062] [ 2021.687367] dump_stack_lvl+0xc1/0xf0 [ 2021.687868] should_fail_ex+0x4b4/0x5b0 [ 2021.688350] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2021.688394] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2021.688407] _copy_from_user+0x30/0xf0 [ 2021.690171] copy_strings.isra.0+0x210/0x850 [ 2021.690771] do_execveat_common+0x675/0x8e0 [ 2021.691333] ? __pfx_do_execveat_common+0x10/0x10 [ 2021.691965] __x64_sys_execveat+0xe4/0x130 [ 2021.692521] do_syscall_64+0x3f/0x90 [ 2021.693016] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2021.693668] RIP: 0033:0x7fa4da37eb19 [ 2021.694144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.696360] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2021.697302] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2021.698176] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2021.699088] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2021.699990] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2021.700862] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2021.701770] [ 2021.711252] FAULT_INJECTION: forcing a failure. [ 2021.711252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.713026] CPU: 0 PID: 9935 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2021.713559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.714105] Call Trace: [ 2021.714284] [ 2021.714441] dump_stack_lvl+0xc1/0xf0 [ 2021.714728] should_fail_ex+0x4b4/0x5b0 [ 2021.715012] _copy_from_user+0x30/0xf0 [ 2021.715302] copy_strings.isra.0+0x210/0x850 [ 2021.715610] do_execveat_common+0x675/0x8e0 [ 2021.715913] ? __pfx_do_execveat_common+0x10/0x10 [ 2021.716240] ? write_comp_data+0x10/0x90 [ 2021.716534] __x64_sys_execveat+0xe4/0x130 [ 2021.716830] do_syscall_64+0x3f/0x90 [ 2021.717090] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2021.717442] RIP: 0033:0x7f4229166b19 [ 2021.717694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.718871] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2021.719377] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2021.719854] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2021.720320] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2021.720789] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2021.721264] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2021.721746] 13:12:24 executing program 4: syz_emit_vhci(0x0, 0x110) 13:12:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) [ 2021.754371] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2021.754393] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}}, 0x0) 13:12:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) [ 2021.779939] Bluetooth: Unexpected continuation frame (len 4) [ 2021.781345] Bluetooth: Unexpected continuation frame (len 4) 13:12:24 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 43) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:12:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}}, 0x0) [ 2021.834895] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2021.834918] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2021.837376] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2021.837396] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2021.847574] FAULT_INJECTION: forcing a failure. [ 2021.847574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.848454] CPU: 0 PID: 9951 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2021.849002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.849549] Call Trace: [ 2021.849729] [ 2021.849888] dump_stack_lvl+0xc1/0xf0 [ 2021.850169] should_fail_ex+0x4b4/0x5b0 [ 2021.850479] _copy_from_user+0x30/0xf0 [ 2021.850784] copy_strings.isra.0+0x210/0x850 [ 2021.851112] do_execveat_common+0x675/0x8e0 [ 2021.851413] ? __pfx_do_execveat_common+0x10/0x10 [ 2021.851765] __x64_sys_execveat+0xe4/0x130 [ 2021.852076] do_syscall_64+0x3f/0x90 [ 2021.852339] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2021.852691] RIP: 0033:0x7f27b14f4b19 [ 2021.852948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.854134] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2021.854652] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2021.855133] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2021.855610] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2021.856083] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2021.856549] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2021.857052] 13:12:24 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0xfffc, 0x1, [{0xc9, 0x4, 0xff80}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "64e1cc4009c5ddd5758276729efa38f2126b74b9b778771d74f8c464315a423d6fddf8ed1f6171ff4dc05ed2f6f9672b8120dc058d60620809c0eeec44fa2bd3e95b8bbbf9ea8f4bde120f7c0e72f9848e9cf74832cb2ce6fba8a51d47d69c2b63b43ac67effb4d5484b228342548ae1958b5ecf37ce73c524e9e664c10b699b45b9b883c08977f80aa0f8abc6adb8256d6d84001c0d1d13a027a39575c5aeea09487e4b94c48294f6e1df321dea5ef53e99d847da236d9a8bc9aae87ce5729ce2821de6b808d706d22bd6623adc4acf510bbfc1f8babc5b9de9d7bf7c5e0cb544b6cb19fdac965deeba7e81ef2d01e3e57af5e79f2a5485"}}}, 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 13:12:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 45) [ 2021.875802] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2021.875823] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:12:24 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) [ 2021.910404] FAULT_INJECTION: forcing a failure. [ 2021.910404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.911926] CPU: 0 PID: 9957 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2021.912504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.913078] Call Trace: [ 2021.913263] [ 2021.913430] dump_stack_lvl+0xc1/0xf0 [ 2021.913709] should_fail_ex+0x4b4/0x5b0 [ 2021.914014] _copy_from_user+0x30/0xf0 [ 2021.914319] copy_strings.isra.0+0x210/0x850 [ 2021.914658] do_execveat_common+0x675/0x8e0 [ 2021.914977] ? __pfx_do_execveat_common+0x10/0x10 [ 2021.915314] __x64_sys_execveat+0xe4/0x130 [ 2021.915611] do_syscall_64+0x3f/0x90 [ 2021.915870] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2021.916233] RIP: 0033:0x7fa4da37eb19 [ 2021.916502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.917702] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2021.918208] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2021.918682] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2021.919159] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2021.919636] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2021.920112] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2021.920600] [ 2021.961142] Bluetooth: hci7: unexpected event 0x48 length: 9 > 3 [ 2021.961163] Bluetooth: hci7: wrong event for mode 0 [ 2021.963302] Bluetooth: hci7: unexpected event 0x48 length: 9 > 3 [ 2021.963321] Bluetooth: hci7: wrong event for mode 0 13:12:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 45) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:12:36 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:12:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:12:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0xfffc, 0x1, [{0xc9, 0x4, 0xff80}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "64e1cc4009c5ddd5758276729efa38f2126b74b9b778771d74f8c464315a423d6fddf8ed1f6171ff4dc05ed2f6f9672b8120dc058d60620809c0eeec44fa2bd3e95b8bbbf9ea8f4bde120f7c0e72f9848e9cf74832cb2ce6fba8a51d47d69c2b63b43ac67effb4d5484b228342548ae1958b5ecf37ce73c524e9e664c10b699b45b9b883c08977f80aa0f8abc6adb8256d6d84001c0d1d13a027a39575c5aeea09487e4b94c48294f6e1df321dea5ef53e99d847da236d9a8bc9aae87ce5729ce2821de6b808d706d22bd6623adc4acf510bbfc1f8babc5b9de9d7bf7c5e0cb544b6cb19fdac965deeba7e81ef2d01e3e57af5e79f2a5485"}}}, 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 13:12:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:36 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) 13:12:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 46) 13:12:36 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 44) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2034.277467] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2034.277487] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2034.277511] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2034.278377] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2034.287963] FAULT_INJECTION: forcing a failure. [ 2034.287963] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.288880] CPU: 1 PID: 9972 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2034.289384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2034.289894] Call Trace: [ 2034.290065] [ 2034.290224] dump_stack_lvl+0xc1/0xf0 [ 2034.290498] should_fail_ex+0x4b4/0x5b0 [ 2034.290790] ? prepare_creds+0x2f/0x6f0 [ 2034.291055] should_failslab+0x9/0x20 [ 2034.291309] kmem_cache_alloc+0x61/0x390 [ 2034.291587] prepare_creds+0x2f/0x6f0 [ 2034.291843] prepare_exec_creds+0x11/0x260 [ 2034.292122] bprm_execve+0xcf/0x1940 [ 2034.292375] ? _copy_from_user+0x5c/0xf0 [ 2034.292659] ? __pfx_bprm_execve+0x10/0x10 [ 2034.292935] ? copy_strings.isra.0+0x551/0x850 [ 2034.293254] do_execveat_common+0x734/0x8e0 [ 2034.293539] ? __pfx_do_execveat_common+0x10/0x10 [ 2034.293866] __x64_sys_execveat+0xe4/0x130 [ 2034.294149] do_syscall_64+0x3f/0x90 [ 2034.294397] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2034.294757] RIP: 0033:0x7fa4da37eb19 [ 2034.294999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2034.296101] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2034.296574] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2034.297020] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2034.297461] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2034.297911] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2034.298357] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2034.298823] [ 2034.311737] Bluetooth: Unexpected continuation frame (len 4) [ 2034.313919] Bluetooth: Unexpected continuation frame (len 4) [ 2034.327121] FAULT_INJECTION: forcing a failure. [ 2034.327121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2034.327912] CPU: 1 PID: 9978 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2034.328429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2034.328939] Call Trace: [ 2034.329112] [ 2034.329264] dump_stack_lvl+0xc1/0xf0 [ 2034.329517] should_fail_ex+0x4b4/0x5b0 [ 2034.329797] _copy_from_user+0x30/0xf0 [ 2034.330066] copy_strings.isra.0+0x210/0x850 [ 2034.330368] do_execveat_common+0x675/0x8e0 [ 2034.330654] ? __pfx_do_execveat_common+0x10/0x10 [ 2034.330996] __x64_sys_execveat+0xe4/0x130 [ 2034.331283] do_syscall_64+0x3f/0x90 [ 2034.331536] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2034.331879] RIP: 0033:0x7f4229166b19 [ 2034.332124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2034.333242] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2034.333727] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2034.334175] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2034.334618] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2034.335089] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2034.335535] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2034.335988] 13:12:36 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) [ 2034.349432] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 2034.349452] Bluetooth: hci1: wrong event for mode 0 [ 2034.364505] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2034.364550] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 13:12:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 47) 13:12:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 46) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2034.408520] FAULT_INJECTION: forcing a failure. [ 2034.408520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2034.411320] CPU: 0 PID: 9979 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2034.412349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2034.413369] Call Trace: [ 2034.413736] [ 2034.414046] dump_stack_lvl+0xc1/0xf0 [ 2034.414569] should_fail_ex+0x4b4/0x5b0 [ 2034.415129] _copy_from_user+0x30/0xf0 [ 2034.415919] copy_strings.isra.0+0x210/0x850 [ 2034.416529] do_execveat_common+0x675/0x8e0 [ 2034.417109] ? __pfx_do_execveat_common+0x10/0x10 [ 2034.417768] __x64_sys_execveat+0xe4/0x130 [ 2034.418329] do_syscall_64+0x3f/0x90 [ 2034.418852] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2034.419537] RIP: 0033:0x7f27b14f4b19 [ 2034.420026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2034.422288] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2034.423290] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2034.424214] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2034.425138] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2034.426055] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2034.427117] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2034.428005] [ 2034.455856] FAULT_INJECTION: forcing a failure. [ 2034.455856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2034.456626] CPU: 1 PID: 9987 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2034.457134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2034.457643] Call Trace: [ 2034.457811] [ 2034.457962] dump_stack_lvl+0xc1/0xf0 [ 2034.458221] should_fail_ex+0x4b4/0x5b0 [ 2034.458496] _copy_from_user+0x30/0xf0 [ 2034.458776] copy_strings.isra.0+0x210/0x850 [ 2034.459073] do_execveat_common+0x675/0x8e0 [ 2034.459354] ? __pfx_do_execveat_common+0x10/0x10 [ 2034.459672] __x64_sys_execveat+0xe4/0x130 [ 2034.459949] do_syscall_64+0x3f/0x90 [ 2034.460196] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2034.460538] RIP: 0033:0x7f4229166b19 [ 2034.460785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2034.461891] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2034.462366] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2034.462820] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2034.463261] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2034.463699] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2034.464147] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2034.464601] 13:12:52 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 45) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:12:52 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 47) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:12:52 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0xff, 0x9a}}}}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xff, 0x5, 0x5, 0x20, 0x0, 0xfffffffffffffff8, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf4500e85, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x3, 0x7a5df007, 0x7, 0xffffffffffffffe0, 0xffff, 0xb4, 0x0, 0x2, 0x0, 0x4c4a526f}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 13:12:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 48) 13:12:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:12:52 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0xfffc, 0x1, [{0xc9, 0x4, 0xff80}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "64e1cc4009c5ddd5758276729efa38f2126b74b9b778771d74f8c464315a423d6fddf8ed1f6171ff4dc05ed2f6f9672b8120dc058d60620809c0eeec44fa2bd3e95b8bbbf9ea8f4bde120f7c0e72f9848e9cf74832cb2ce6fba8a51d47d69c2b63b43ac67effb4d5484b228342548ae1958b5ecf37ce73c524e9e664c10b699b45b9b883c08977f80aa0f8abc6adb8256d6d84001c0d1d13a027a39575c5aeea09487e4b94c48294f6e1df321dea5ef53e99d847da236d9a8bc9aae87ce5729ce2821de6b808d706d22bd6623adc4acf510bbfc1f8babc5b9de9d7bf7c5e0cb544b6cb19fdac965deeba7e81ef2d01e3e57af5e79f2a5485"}}}, 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 13:12:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) [ 2049.667857] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2049.667902] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2049.686773] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 2049.686811] Bluetooth: hci1: wrong event for mode 0 [ 2049.688389] FAULT_INJECTION: forcing a failure. [ 2049.688389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.689862] CPU: 1 PID: 10003 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2049.690562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.691285] Call Trace: [ 2049.691516] [ 2049.691722] dump_stack_lvl+0xc1/0xf0 [ 2049.692074] should_fail_ex+0x4b4/0x5b0 [ 2049.692448] _copy_from_user+0x30/0xf0 [ 2049.692817] copy_strings.isra.0+0x210/0x850 [ 2049.693220] do_execveat_common+0x675/0x8e0 [ 2049.693604] ? __pfx_do_execveat_common+0x10/0x10 [ 2049.694040] __x64_sys_execveat+0xe4/0x130 [ 2049.694420] do_syscall_64+0x3f/0x90 [ 2049.694758] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2049.695225] RIP: 0033:0x7f27b14f4b19 [ 2049.695559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.697087] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2049.697742] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2049.698360] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2049.698981] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2049.699587] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2049.700199] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2049.700828] [ 2049.707862] FAULT_INJECTION: forcing a failure. [ 2049.707862] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.708847] CPU: 1 PID: 10006 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2049.709549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.710247] Call Trace: [ 2049.710480] [ 2049.710688] dump_stack_lvl+0xc1/0xf0 [ 2049.711036] should_fail_ex+0x4b4/0x5b0 [ 2049.711411] ? security_prepare_creds+0x116/0x190 [ 2049.711841] should_failslab+0x9/0x20 [ 2049.712187] __kmem_cache_alloc_node+0x66/0x310 [ 2049.712606] ? security_prepare_creds+0x116/0x190 [ 2049.713037] ? security_prepare_creds+0x116/0x190 [ 2049.713468] __kmalloc+0x4d/0x160 [ 2049.713791] security_prepare_creds+0x116/0x190 [ 2049.714212] prepare_creds+0x509/0x6f0 [ 2049.714429] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2049.714553] prepare_exec_creds+0x11/0x260 [ 2049.715427] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2049.715735] bprm_execve+0xcf/0x1940 [ 2049.715762] ? _copy_from_user+0x5c/0xf0 [ 2049.717241] ? __pfx_bprm_execve+0x10/0x10 [ 2049.717613] ? copy_strings.isra.0+0x551/0x850 [ 2049.718027] do_execveat_common+0x734/0x8e0 [ 2049.718409] ? __pfx_do_execveat_common+0x10/0x10 [ 2049.718845] __x64_sys_execveat+0xe4/0x130 [ 2049.719238] do_syscall_64+0x3f/0x90 [ 2049.719585] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2049.720044] RIP: 0033:0x7fa4da37eb19 [ 2049.720371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.721906] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2049.722559] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2049.723182] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2049.723794] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2049.724400] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2049.725008] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2049.725637] 13:12:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:12:52 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3f, 0x1, 0x7, 0xe0, 0x0, 0x2, 0x1400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4ab7, 0x1, @perf_config_ext={0xffffffff, 0x5}, 0x486c0, 0x1496, 0x0, 0x4, 0x7, 0x9, 0xc88, 0x0, 0x0, 0x0, 0x9c}, r0, 0x8, r2, 0x12) [ 2049.741372] FAULT_INJECTION: forcing a failure. [ 2049.741372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.742331] CPU: 1 PID: 10007 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2049.743035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.743704] Call Trace: [ 2049.743925] [ 2049.744128] dump_stack_lvl+0xc1/0xf0 [ 2049.744475] should_fail_ex+0x4b4/0x5b0 [ 2049.744856] _copy_from_user+0x30/0xf0 [ 2049.745218] copy_strings.isra.0+0x210/0x850 [ 2049.745622] do_execveat_common+0x675/0x8e0 [ 2049.746009] ? __pfx_do_execveat_common+0x10/0x10 [ 2049.746444] __x64_sys_execveat+0xe4/0x130 [ 2049.746828] do_syscall_64+0x3f/0x90 [ 2049.747187] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2049.747642] RIP: 0033:0x7f4229166b19 [ 2049.747964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.749488] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2049.750126] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2049.750728] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2049.751337] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2049.751953] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2049.752563] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2049.753187] 13:12:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) [ 2049.779274] Bluetooth: Unexpected continuation frame (len 4) [ 2049.780642] Bluetooth: Unexpected continuation frame (len 4) 13:12:52 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0xfffc, 0x1, [{0xc9, 0x4, 0xff80}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "64e1cc4009c5ddd5758276729efa38f2126b74b9b778771d74f8c464315a423d6fddf8ed1f6171ff4dc05ed2f6f9672b8120dc058d60620809c0eeec44fa2bd3e95b8bbbf9ea8f4bde120f7c0e72f9848e9cf74832cb2ce6fba8a51d47d69c2b63b43ac67effb4d5484b228342548ae1958b5ecf37ce73c524e9e664c10b699b45b9b883c08977f80aa0f8abc6adb8256d6d84001c0d1d13a027a39575c5aeea09487e4b94c48294f6e1df321dea5ef53e99d847da236d9a8bc9aae87ce5729ce2821de6b808d706d22bd6623adc4acf510bbfc1f8babc5b9de9d7bf7c5e0cb544b6cb19fdac965deeba7e81ef2d01e3e57af5e79f2a5485"}}}, 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 13:12:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 2049.789488] Bluetooth: hci5: unexpected event 0x3e length: 269 > 260 [ 2049.789529] Bluetooth: hci5: unexpected subevent 0x02 length: 268 > 260 [ 2049.792544] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2049.792581] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:12:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) [ 2049.848087] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 2049.848136] Bluetooth: hci1: wrong event for mode 0 [ 2049.869582] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2049.869663] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:13:04 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0xfffc, 0x1, [{0xc9, 0x4, 0xff80}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "64e1cc4009c5ddd5758276729efa38f2126b74b9b778771d74f8c464315a423d6fddf8ed1f6171ff4dc05ed2f6f9672b8120dc058d60620809c0eeec44fa2bd3e95b8bbbf9ea8f4bde120f7c0e72f9848e9cf74832cb2ce6fba8a51d47d69c2b63b43ac67effb4d5484b228342548ae1958b5ecf37ce73c524e9e664c10b699b45b9b883c08977f80aa0f8abc6adb8256d6d84001c0d1d13a027a39575c5aeea09487e4b94c48294f6e1df321dea5ef53e99d847da236d9a8bc9aae87ce5729ce2821de6b808d706d22bd6623adc4acf510bbfc1f8babc5b9de9d7bf7c5e0cb544b6cb19fdac965deeba7e81ef2d01e3e57af5e79f2a5485"}}}, 0x102) 13:13:04 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1f, 0x1f, 0x40, 0x9, 0x0, 0x3, 0x8, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2d13, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x10004, 0x3, 0x5, 0x6, 0x28000000000000, 0x1, 0x488, 0x0, 0x5, 0x0, 0x10000}, r1, 0xf, r0, 0x1) 13:13:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 49) 13:13:04 executing program 5: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 13:13:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:13:04 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 46) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 48) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:13:04 executing program 2: [ 2061.619792] Bluetooth: Unexpected continuation frame (len 4) [ 2061.624446] Bluetooth: Unexpected continuation frame (len 4) [ 2061.645888] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 2061.645930] Bluetooth: hci1: wrong event for mode 0 [ 2061.662962] FAULT_INJECTION: forcing a failure. [ 2061.662962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2061.664347] CPU: 1 PID: 10040 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2061.665268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.666178] Call Trace: [ 2061.666483] [ 2061.666754] dump_stack_lvl+0xc1/0xf0 [ 2061.667221] should_fail_ex+0x4b4/0x5b0 [ 2061.667565] FAULT_INJECTION: forcing a failure. [ 2061.667565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2061.668936] _copy_from_user+0x30/0xf0 [ 2061.668988] copy_strings.isra.0+0x210/0x850 [ 2061.669031] do_execveat_common+0x675/0x8e0 [ 2061.669064] ? __pfx_do_execveat_common+0x10/0x10 [ 2061.669110] __x64_sys_execveat+0xe4/0x130 [ 2061.669147] do_syscall_64+0x3f/0x90 [ 2061.669178] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2061.669214] RIP: 0033:0x7f4229166b19 [ 2061.669234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.669260] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2061.669287] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2061.669305] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2061.669323] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2061.669340] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2061.669358] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2061.669394] [ 2061.698288] CPU: 0 PID: 10039 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2061.699463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.700631] Call Trace: [ 2061.701018] [ 2061.701354] dump_stack_lvl+0xc1/0xf0 [ 2061.701918] should_fail_ex+0x4b4/0x5b0 [ 2061.702512] _copy_from_user+0x30/0xf0 [ 2061.703118] copy_strings.isra.0+0x210/0x850 [ 2061.703762] do_execveat_common+0x675/0x8e0 [ 2061.704404] ? __pfx_do_execveat_common+0x10/0x10 [ 2061.705145] __x64_sys_execveat+0xe4/0x130 [ 2061.705771] do_syscall_64+0x3f/0x90 [ 2061.706327] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2061.707084] RIP: 0033:0x7f27b14f4b19 [ 2061.707629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.710169] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2061.711254] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2061.712294] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2061.713343] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2061.714387] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2061.715455] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2061.716515] 13:13:04 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0xfffc, 0x1, [{0xc9, 0x4, 0xff80}]}}}, 0xc) 13:13:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:13:04 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x20e, r0, 0x9) 13:13:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 50) 13:13:04 executing program 2: 13:13:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 49) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2061.818213] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 2061.818256] Bluetooth: hci1: wrong event for mode 0 13:13:04 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 47) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 2061.859974] FAULT_INJECTION: forcing a failure. [ 2061.859974] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.861208] CPU: 1 PID: 10052 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2061.862036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.862861] Call Trace: [ 2061.863149] [ 2061.863397] dump_stack_lvl+0xc1/0xf0 [ 2061.863813] should_fail_ex+0x4b4/0x5b0 [ 2061.864259] ? alloc_empty_file+0x76/0x1e0 [ 2061.864715] should_failslab+0x9/0x20 [ 2061.865125] kmem_cache_alloc+0x61/0x390 [ 2061.865574] alloc_empty_file+0x76/0x1e0 [ 2061.866025] path_openat+0xd8/0x2710 [ 2061.866437] ? __pfx_path_openat+0x10/0x10 [ 2061.866881] ? __lock_acquire+0x19b1/0x6340 [ 2061.867355] do_filp_open+0x1ba/0x410 [ 2061.867763] ? __pfx_do_filp_open+0x10/0x10 [ 2061.868224] ? __pfx___lock_acquire+0x10/0x10 [ 2061.868709] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2061.869226] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2061.869752] ? perf_trace_preemptirq_template+0x252/0x420 [ 2061.870317] ? lock_release+0x1e3/0x680 [ 2061.870740] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2061.871358] ? __pfx_lock_release+0x10/0x10 [ 2061.871819] do_open_execat+0x10d/0x3c0 [ 2061.872243] ? __pfx_do_open_execat+0x10/0x10 [ 2061.872724] ? sched_mm_cid_before_execve+0x249/0x360 [ 2061.873267] bprm_execve+0x49a/0x1940 [ 2061.873680] ? _copy_from_user+0x5c/0xf0 [ 2061.874123] ? __pfx_bprm_execve+0x10/0x10 [ 2061.874575] ? copy_strings.isra.0+0x551/0x850 [ 2061.875093] do_execveat_common+0x734/0x8e0 [ 2061.875563] ? __pfx_do_execveat_common+0x10/0x10 [ 2061.876090] __x64_sys_execveat+0xe4/0x130 [ 2061.876534] do_syscall_64+0x3f/0x90 [ 2061.876941] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2061.877484] RIP: 0033:0x7fa4da37eb19 [ 2061.877877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.879737] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2061.880528] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2061.881271] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2061.882008] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2061.882738] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2061.883482] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2061.884236] [ 2061.910784] FAULT_INJECTION: forcing a failure. [ 2061.910784] name fail_usercopy, interval 1, probability 0, space 0, times 0 13:13:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) [ 2061.912028] CPU: 1 PID: 10055 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2061.913000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.913812] Call Trace: [ 2061.914078] [ 2061.914316] dump_stack_lvl+0xc1/0xf0 [ 2061.914715] should_fail_ex+0x4b4/0x5b0 [ 2061.915148] _copy_from_user+0x30/0xf0 [ 2061.915581] copy_strings.isra.0+0x210/0x850 [ 2061.916041] do_execveat_common+0x675/0x8e0 [ 2061.916476] ? __pfx_do_execveat_common+0x10/0x10 [ 2061.916988] __x64_sys_execveat+0xe4/0x130 [ 2061.917421] do_syscall_64+0x3f/0x90 [ 2061.917835] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2061.918374] RIP: 0033:0x7f4229166b19 [ 2061.918745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.920514] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2061.921283] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2061.921971] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2061.922675] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2061.923397] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2061.924098] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2061.924806] [ 2061.938572] Bluetooth: Unexpected continuation frame (len 4) 13:13:04 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 13:13:04 executing program 2: [ 2061.946240] FAULT_INJECTION: forcing a failure. [ 2061.946240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2061.947521] CPU: 1 PID: 10059 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2061.948309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.949098] Call Trace: [ 2061.949357] [ 2061.949587] dump_stack_lvl+0xc1/0xf0 [ 2061.949970] should_fail_ex+0x4b4/0x5b0 [ 2061.950386] _copy_from_user+0x30/0xf0 [ 2061.950797] copy_strings.isra.0+0x210/0x850 [ 2061.951271] do_execveat_common+0x675/0x8e0 [ 2061.951699] ? __pfx_do_execveat_common+0x10/0x10 [ 2061.952190] __x64_sys_execveat+0xe4/0x130 [ 2061.952613] do_syscall_64+0x3f/0x90 [ 2061.952987] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2061.953500] RIP: 0033:0x7f27b14f4b19 [ 2061.953867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.955574] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2061.956291] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2061.956970] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2061.957660] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2061.958346] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2061.959044] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2061.959737] 13:13:04 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x1e, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02013f2519b69de56519b0d9c04100000006000000"], 0x9) [ 2061.997742] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2061.997786] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:13:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c700f773955adfb5964b"], 0x9) [ 2062.039788] Bluetooth: hci7: ACL packet for unknown connection handle 3841 [ 2062.043755] Bluetooth: hci7: ACL packet for unknown connection handle 3841 13:13:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 51) 13:13:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c700f773955adfb5964b"], 0x9) 13:13:15 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x5, 0x1f, 0x200, 0x1}}}}, 0x15) 13:13:15 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:15 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 50) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:13:15 executing program 2: syz_emit_vhci(0x0, 0x110) 13:13:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) 13:13:15 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) 13:13:15 executing program 2: syz_emit_vhci(0x0, 0x110) [ 2062.092860] Bluetooth: hci5: SCO packet for unknown connection handle 199 [ 2072.832687] Bluetooth: hci5: SCO packet for unknown connection handle 199 [ 2072.851730] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2072.852230] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2072.876059] FAULT_INJECTION: forcing a failure. [ 2072.876059] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.877672] CPU: 1 PID: 10080 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2072.878760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2072.879840] Call Trace: [ 2072.880189] [ 2072.880502] dump_stack_lvl+0xc1/0xf0 [ 2072.881056] should_fail_ex+0x4b4/0x5b0 [ 2072.881616] ? prepare_creds+0x2f/0x6f0 [ 2072.882169] should_failslab+0x9/0x20 [ 2072.882686] kmem_cache_alloc+0x61/0x390 [ 2072.883281] prepare_creds+0x2f/0x6f0 [ 2072.883829] prepare_exec_creds+0x11/0x260 [ 2072.884400] bprm_execve+0xcf/0x1940 [ 2072.885043] ? _copy_from_user+0x5c/0xf0 [ 2072.885841] ? __pfx_bprm_execve+0x10/0x10 [ 2072.886599] ? copy_strings.isra.0+0x551/0x850 [ 2072.887510] do_execveat_common+0x734/0x8e0 [ 2072.888320] ? __pfx_do_execveat_common+0x10/0x10 [ 2072.889259] __x64_sys_execveat+0xe4/0x130 [ 2072.890071] do_syscall_64+0x3f/0x90 [ 2072.890806] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2072.891537] RIP: 0033:0x7f27b14f4b19 [ 2072.892078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2072.894506] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2072.895594] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2072.896567] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2072.897536] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2072.898504] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2072.899517] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2072.900508] [ 2072.942313] FAULT_INJECTION: forcing a failure. [ 2072.942313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2072.943218] CPU: 0 PID: 10090 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2072.943763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2072.944309] Call Trace: [ 2072.944493] [ 2072.944657] dump_stack_lvl+0xc1/0xf0 [ 2072.944929] should_fail_ex+0x4b4/0x5b0 [ 2072.945217] _copy_from_user+0x30/0xf0 [ 2072.945506] copy_strings.isra.0+0x210/0x850 [ 2072.945835] do_execveat_common+0x675/0x8e0 [ 2072.946138] ? __pfx_do_execveat_common+0x10/0x10 [ 2072.946483] __x64_sys_execveat+0xe4/0x130 [ 2072.946781] do_syscall_64+0x3f/0x90 [ 2072.947051] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2072.947425] RIP: 0033:0x7f4229166b19 [ 2072.947676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2072.948845] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2072.949360] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2072.949838] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2072.950311] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2072.950781] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2072.951271] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2072.951791] 13:13:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c700f773955adfb5964b"], 0x9) 13:13:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) 13:13:27 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 51) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:13:27 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) 13:13:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 52) 13:13:27 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 49) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:27 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x57a5}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x81, 0x0, 0x2, 0x0, 0x0, 0x2, 0x80, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xae, 0x2, @perf_bp={&(0x7f0000000000), 0x10}, 0x1000, 0x4, 0x6, 0x7, 0xfffffffffffffbff, 0x7, 0x3, 0x0, 0x401, 0x0, 0x1}, r4, 0xe, r5, 0xb) 13:13:27 executing program 2: syz_emit_vhci(0x0, 0x110) 13:13:27 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2085.448969] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2085.449014] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2085.455170] FAULT_INJECTION: forcing a failure. [ 2085.455170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2085.456010] CPU: 1 PID: 10105 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2085.456549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.457083] Call Trace: [ 2085.457258] [ 2085.457417] dump_stack_lvl+0xc1/0xf0 [ 2085.457685] should_fail_ex+0x4b4/0x5b0 [ 2085.457979] _copy_from_user+0x30/0xf0 [ 2085.458270] copy_strings.isra.0+0x210/0x850 [ 2085.458581] do_execveat_common+0x675/0x8e0 [ 2085.458889] ? __pfx_do_execveat_common+0x10/0x10 [ 2085.459236] __x64_sys_execveat+0xe4/0x130 [ 2085.459552] do_syscall_64+0x3f/0x90 [ 2085.459833] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2085.460210] RIP: 0033:0x7f4229166b19 [ 2085.460475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.461718] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2085.462247] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2085.462741] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2085.463242] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2085.463742] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2085.464231] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2085.464738] [ 2085.467082] FAULT_INJECTION: forcing a failure. [ 2085.467082] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.467878] CPU: 1 PID: 10101 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2085.468443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.469015] Call Trace: [ 2085.469202] [ 2085.469371] dump_stack_lvl+0xc1/0xf0 [ 2085.469654] should_fail_ex+0x4b4/0x5b0 [ 2085.469955] ? security_file_alloc+0x38/0x170 [ 2085.470280] should_failslab+0x9/0x20 [ 2085.470564] kmem_cache_alloc+0x61/0x390 [ 2085.470877] security_file_alloc+0x38/0x170 [ 2085.471177] init_file+0x99/0x250 [ 2085.471457] alloc_empty_file+0x94/0x1e0 [ 2085.471761] path_openat+0xd8/0x2710 [ 2085.472046] ? __pfx_path_openat+0x10/0x10 [ 2085.472349] ? __lock_acquire+0x19b1/0x6340 [ 2085.472668] do_filp_open+0x1ba/0x410 [ 2085.472941] ? __pfx_do_filp_open+0x10/0x10 [ 2085.473255] ? __pfx___lock_acquire+0x10/0x10 [ 2085.473585] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2085.473940] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2085.474301] ? perf_trace_preemptirq_template+0x252/0x420 [ 2085.474685] ? lock_release+0x1e3/0x680 [ 2085.474976] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2085.475383] ? __pfx_lock_release+0x10/0x10 [ 2085.475701] do_open_execat+0x10d/0x3c0 [ 2085.475972] ? __pfx_do_open_execat+0x10/0x10 [ 2085.476300] ? sched_mm_cid_before_execve+0x249/0x360 [ 2085.476666] bprm_execve+0x49a/0x1940 [ 2085.476947] ? _copy_from_user+0x5c/0xf0 [ 2085.477234] ? __pfx_bprm_execve+0x10/0x10 [ 2085.477536] ? copy_strings.isra.0+0x551/0x850 [ 2085.477852] do_execveat_common+0x734/0x8e0 [ 2085.478160] ? __pfx_do_execveat_common+0x10/0x10 [ 2085.478513] __x64_sys_execveat+0xe4/0x130 [ 2085.478820] do_syscall_64+0x3f/0x90 [ 2085.479084] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2085.479465] RIP: 0033:0x7fa4da37eb19 [ 2085.479732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.480894] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2085.481423] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2085.481920] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2085.482418] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2085.482910] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2085.483419] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2085.483934] [ 2085.485896] Bluetooth: hci5: SCO packet for unknown connection handle 199 [ 2085.500567] Bluetooth: Unexpected continuation frame (len 4) 13:13:27 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) [ 2085.505884] FAULT_INJECTION: forcing a failure. [ 2085.505884] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.506653] CPU: 1 PID: 10113 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2085.507206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.507755] Call Trace: [ 2085.507938] [ 2085.508103] dump_stack_lvl+0xc1/0xf0 [ 2085.508376] should_fail_ex+0x4b4/0x5b0 [ 2085.508659] ? security_prepare_creds+0x116/0x190 [ 2085.508998] should_failslab+0x9/0x20 [ 2085.509267] __kmem_cache_alloc_node+0x66/0x310 [ 2085.509594] ? security_prepare_creds+0x116/0x190 [ 2085.509926] ? security_prepare_creds+0x116/0x190 [ 2085.510258] __kmalloc+0x4d/0x160 [ 2085.510506] security_prepare_creds+0x116/0x190 [ 2085.510831] prepare_creds+0x509/0x6f0 [ 2085.511107] prepare_exec_creds+0x11/0x260 [ 2085.511411] bprm_execve+0xcf/0x1940 [ 2085.511676] ? _copy_from_user+0x5c/0xf0 [ 2085.511982] ? __pfx_bprm_execve+0x10/0x10 [ 2085.512270] ? copy_strings.isra.0+0x551/0x850 [ 2085.512604] do_execveat_common+0x734/0x8e0 [ 2085.512904] ? __pfx_do_execveat_common+0x10/0x10 [ 2085.513256] __x64_sys_execveat+0xe4/0x130 [ 2085.513549] do_syscall_64+0x3f/0x90 [ 2085.513821] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2085.514177] RIP: 0033:0x7f27b14f4b19 [ 2085.514440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.515630] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2085.516158] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2085.516650] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2085.517144] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2085.517638] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2085.518134] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2085.518639] 13:13:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) [ 2085.522689] Bluetooth: Unexpected continuation frame (len 4) 13:13:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:13:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:13:28 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 52) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2085.579269] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2085.579326] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:13:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:13:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) [ 2085.618442] FAULT_INJECTION: forcing a failure. [ 2085.618442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2085.619260] CPU: 1 PID: 10127 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2085.619830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.620398] Call Trace: [ 2085.620582] [ 2085.620751] dump_stack_lvl+0xc1/0xf0 [ 2085.621039] should_fail_ex+0x4b4/0x5b0 [ 2085.621342] _copy_from_user+0x30/0xf0 [ 2085.621636] copy_strings.isra.0+0x210/0x850 [ 2085.621960] do_execveat_common+0x675/0x8e0 [ 2085.622279] ? __pfx_do_execveat_common+0x10/0x10 [ 2085.622615] __x64_sys_execveat+0xe4/0x130 [ 2085.622920] do_syscall_64+0x3f/0x90 [ 2085.623181] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2085.623566] RIP: 0033:0x7f4229166b19 [ 2085.623819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.625045] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2085.625566] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2085.626066] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2085.626561] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2085.627051] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2085.627540] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2085.628043] 13:13:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x4, 0x3a, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0x3ff, 0x8}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000140), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r6}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910040000000100c3b805a291ab057c182e5a61db8806324337eb5657e6d824c2879470c6e936d632d51be4a8207b35fcad665d41438548fd86b9de30f44af533b6d220bc851c1428e4c16aa328ff927b4a93192cf34fe83d4e4c1333a80bf34265e53117708cd359126c0007372ff205fa3b7a0d79529e399aa46804983d0ddf91ae358d131a05547c192261d4f631d17e9bbb946683523f3be16b880076003447ddbc8952d5faac2972cbed7398c9c8c4dca7f8c877dc47db4c72890508305d0dee324a6e7b2e0d57fd8d6e22d7f31f8901e776c2"], 0x9) 13:13:28 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 51) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) 13:13:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:13:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 53) 13:13:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2085.716918] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2085.716962] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:13:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) [ 2085.761773] Bluetooth: Unexpected continuation frame (len 4) [ 2085.790886] Bluetooth: Unexpected continuation frame (len 4) 13:13:38 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 53) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:13:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r3, @ANYBLOB="1746b000000000edffe4a9299ec3ff56ac3131d7f9304cd75b269635751c0b32a0c127b8426ed01406ebb2c9c45eff83b6f359019f36545712518841269b4762a1a42146e9c08c2aff5ea6973641795c5325d026c3a1740f0b46002eea6e38ee1beaa2146e33bc1b50589c09d7f1be33b20651da24f99504b339511df6f667a9d88bb2b0d59639252ce70731b87771d02936", @ANYRES32=r1, @ANYRES16], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2f021148}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5cff0000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf256900000008000300", @ANYRES32=r1, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:13:38 executing program 3: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 13:13:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 52) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 54) 13:13:38 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18"], 0x110) 13:13:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c700f773955adfb5964b"], 0x9) 13:13:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) [ 2096.318945] Bluetooth: hci5: SCO packet for unknown connection handle 199 [ 2096.324925] FAULT_INJECTION: forcing a failure. [ 2096.324925] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.326207] CPU: 1 PID: 10162 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2096.326787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.327360] Call Trace: [ 2096.327558] [ 2096.327724] dump_stack_lvl+0xc1/0xf0 [ 2096.328010] should_fail_ex+0x4b4/0x5b0 [ 2096.328312] ? alloc_empty_file+0x76/0x1e0 [ 2096.328628] should_failslab+0x9/0x20 [ 2096.328916] kmem_cache_alloc+0x61/0x390 [ 2096.329223] alloc_empty_file+0x76/0x1e0 [ 2096.329514] path_openat+0xd8/0x2710 [ 2096.329786] ? __pfx_path_openat+0x10/0x10 [ 2096.330079] ? __lock_acquire+0x19b1/0x6340 [ 2096.330389] do_filp_open+0x1ba/0x410 [ 2096.330644] ? __pfx_do_filp_open+0x10/0x10 [ 2096.330941] ? __pfx___lock_acquire+0x10/0x10 [ 2096.331237] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2096.331587] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2096.331929] ? perf_trace_preemptirq_template+0x252/0x420 [ 2096.332308] ? lock_release+0x1e3/0x680 [ 2096.332582] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2096.332992] ? __pfx_lock_release+0x10/0x10 [ 2096.333293] do_open_execat+0x10d/0x3c0 [ 2096.333568] ? __pfx_do_open_execat+0x10/0x10 [ 2096.333878] ? sched_mm_cid_before_execve+0x249/0x360 [ 2096.334232] bprm_execve+0x49a/0x1940 [ 2096.334499] ? _copy_from_user+0x5c/0xf0 [ 2096.334775] ? __pfx_bprm_execve+0x10/0x10 [ 2096.335070] ? copy_strings.isra.0+0x551/0x850 [ 2096.335369] do_execveat_common+0x734/0x8e0 [ 2096.335699] ? __pfx_do_execveat_common+0x10/0x10 [ 2096.336053] __x64_sys_execveat+0xe4/0x130 [ 2096.336357] do_syscall_64+0x3f/0x90 [ 2096.336630] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2096.336838] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2096.336994] RIP: 0033:0x7f27b14f4b19 [ 2096.337009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.337885] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2096.338107] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2096.341350] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2096.341848] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2096.342346] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2096.342846] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2096.343339] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2096.343862] [ 2096.345475] FAULT_INJECTION: forcing a failure. [ 2096.345475] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.346747] CPU: 1 PID: 10163 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2096.347341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.347926] Call Trace: [ 2096.348111] [ 2096.348278] dump_stack_lvl+0xc1/0xf0 [ 2096.348556] should_fail_ex+0x4b4/0x5b0 [ 2096.348858] should_failslab+0x9/0x20 [ 2096.349143] kmem_cache_alloc_lru+0x7a/0x680 [ 2096.349467] ? __d_alloc+0x31/0x9c0 [ 2096.349761] ? __d_alloc+0x31/0x9c0 [ 2096.350044] __d_alloc+0x31/0x9c0 [ 2096.350311] d_alloc_parallel+0x10e/0x1640 [ 2096.350629] ? __d_lookup+0x247/0x4a0 [ 2096.350933] ? lock_release+0x1e3/0x680 [ 2096.351244] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2096.351689] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2096.352033] ? lock_is_held_type+0x9f/0x120 [ 2096.352353] ? __d_lookup+0x269/0x4a0 [ 2096.352638] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2096.353015] lookup_open.isra.0+0x909/0x1400 [ 2096.353350] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2096.353717] ? lookup_fast+0x14e/0x530 [ 2096.354000] path_openat+0x96c/0x2710 [ 2096.354283] ? __pfx_path_openat+0x10/0x10 [ 2096.354585] ? __lock_acquire+0x19b1/0x6340 [ 2096.354901] do_filp_open+0x1ba/0x410 [ 2096.355181] ? __pfx_do_filp_open+0x10/0x10 [ 2096.355516] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2096.355884] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2096.356334] ? lock_release+0x1e3/0x680 [ 2096.356651] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2096.357177] ? __pfx_lock_release+0x10/0x10 [ 2096.357494] do_open_execat+0x10d/0x3c0 [ 2096.357786] ? __pfx_do_open_execat+0x10/0x10 [ 2096.358125] ? sched_mm_cid_before_execve+0x249/0x360 [ 2096.358502] bprm_execve+0x49a/0x1940 [ 2096.358568] Bluetooth: Unexpected continuation frame (len 4) [ 2096.358780] ? _copy_from_user+0x5c/0xf0 [ 2096.359830] ? __pfx_bprm_execve+0x10/0x10 [ 2096.360133] ? copy_strings.isra.0+0x551/0x850 [ 2096.360470] do_execveat_common+0x734/0x8e0 [ 2096.360788] ? __pfx_do_execveat_common+0x10/0x10 [ 2096.361155] __x64_sys_execveat+0xe4/0x130 [ 2096.361472] do_syscall_64+0x3f/0x90 [ 2096.361746] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2096.362121] RIP: 0033:0x7fa4da37eb19 [ 2096.362402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.363648] RSP: 002b:00007fa4d78f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2096.364181] RAX: ffffffffffffffda RBX: 00007fa4da491f60 RCX: 00007fa4da37eb19 [ 2096.364672] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2096.365164] RBP: 00007fa4d78f41d0 R08: 0000000000001000 R09: 0000000000000000 [ 2096.365676] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2096.366190] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2096.366705] [ 2096.369111] FAULT_INJECTION: forcing a failure. [ 2096.369111] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.369860] CPU: 1 PID: 10166 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2096.370428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.371001] Call Trace: [ 2096.371187] [ 2096.371346] dump_stack_lvl+0xc1/0xf0 [ 2096.371634] should_fail_ex+0x4b4/0x5b0 [ 2096.371937] ? prepare_creds+0x2f/0x6f0 [ 2096.372231] should_failslab+0x9/0x20 [ 2096.372515] kmem_cache_alloc+0x61/0x390 [ 2096.372826] prepare_creds+0x2f/0x6f0 [ 2096.373114] prepare_exec_creds+0x11/0x260 [ 2096.373423] bprm_execve+0xcf/0x1940 [ 2096.373701] ? _copy_from_user+0x5c/0xf0 [ 2096.374003] ? __pfx_bprm_execve+0x10/0x10 [ 2096.374309] ? copy_strings.isra.0+0x551/0x850 [ 2096.374652] do_execveat_common+0x734/0x8e0 [ 2096.374967] ? __pfx_do_execveat_common+0x10/0x10 [ 2096.375320] __x64_sys_execveat+0xe4/0x130 [ 2096.375669] do_syscall_64+0x3f/0x90 [ 2096.375941] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2096.376321] RIP: 0033:0x7f4229166b19 [ 2096.376587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:13:38 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) [ 2096.377845] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2096.378567] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2096.379000] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2096.379436] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2096.379876] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2096.380310] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2096.380757] [ 2096.409705] Bluetooth: Unexpected continuation frame (len 4) [ 2096.419936] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2096.419975] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:13:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:13:49 executing program 5: syz_emit_vhci(0x0, 0x9) 13:13:49 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 54) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:13:49 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) 13:13:49 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 53) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 55) 13:13:49 executing program 6: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x5, 0x2, 0x1, 0xb, 0x9, 0x1000}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:13:49 executing program 3: syz_emit_vhci(0x0, 0x0) [ 2106.746132] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2106.746176] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2106.777127] Bluetooth: Unexpected continuation frame (len 4) [ 2106.780749] Bluetooth: Unexpected continuation frame (len 4) 13:13:49 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce"], 0x110) 13:13:49 executing program 5: syz_emit_vhci(0x0, 0x9) 13:13:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:13:49 executing program 3: syz_emit_vhci(0x0, 0x0) 13:13:49 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 54) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:13:49 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0xc8000, 0x100) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1f, 0x3f, 0x7, 0x3, 0x0, 0x800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x2, 0x768, 0x3f, 0x6, 0x3, 0x1, 0x9, 0x0, 0x100, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910cf4ab8ac7c724fc7b80ba6d40692a7c29dfad3a474"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc6}, @l2cap_cid_signaling={{0xc2}, [@l2cap_info_req={{0xa, 0x20, 0x2}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0x100}}, @l2cap_conn_req={{0x2, 0xac, 0x4}, {0x3, 0x9000}}, @l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x200, 0x8, 0x7, 0x3f}}, @l2cap_info_rsp={{0xb, 0x40, 0x60}, {0x2, 0x40, "4c2c817fe6a23fb1484c6e8bd2c7bd90f5d843f68a2751663f731d0047226333e3834488fd9562684912d2dd86360919476426a7e186a88fb87ac3f1f9e7d90f47aef0eb0922077979ab5ba19a3a9f6865f226a2e5053ab0a090233b"}}, @l2cap_conf_rsp={{0x5, 0x7f, 0x32}, {0x7fff, 0x9, 0x7, [@l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x1, 0x4, 0x7f, 0x4, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0x46}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xf7, 0x0, 0x7, 0x5, 0x4, 0x4}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x99, 0x4}, {0xfeff, 0x4}}]}}, 0xcb) 13:13:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 56) [ 2106.875548] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2106.875704] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2106.904297] FAULT_INJECTION: forcing a failure. [ 2106.904297] name failslab, interval 1, probability 0, space 0, times 0 [ 2106.905269] CPU: 1 PID: 10206 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2106.905832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.906390] Call Trace: [ 2106.906574] [ 2106.906737] dump_stack_lvl+0xc1/0xf0 [ 2106.907024] should_fail_ex+0x4b4/0x5b0 [ 2106.907323] ? security_file_alloc+0x38/0x170 [ 2106.907661] should_failslab+0x9/0x20 [ 2106.907946] kmem_cache_alloc+0x61/0x390 [ 2106.908247] security_file_alloc+0x38/0x170 [ 2106.908554] init_file+0x99/0x250 [ 2106.908814] alloc_empty_file+0x94/0x1e0 [ 2106.909111] path_openat+0xd8/0x2710 [ 2106.909397] ? __pfx_path_openat+0x10/0x10 [ 2106.909683] ? __lock_acquire+0x19b1/0x6340 [ 2106.910007] do_filp_open+0x1ba/0x410 [ 2106.910285] ? __pfx_do_filp_open+0x10/0x10 [ 2106.910595] ? __pfx___lock_acquire+0x10/0x10 [ 2106.910928] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2106.911281] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2106.911634] ? perf_trace_preemptirq_template+0x252/0x420 [ 2106.912032] ? lock_release+0x1e3/0x680 [ 2106.912307] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2106.912718] ? __pfx_lock_release+0x10/0x10 [ 2106.913012] do_open_execat+0x10d/0x3c0 [ 2106.913280] ? __pfx_do_open_execat+0x10/0x10 [ 2106.913630] ? sched_mm_cid_before_execve+0x249/0x360 [ 2106.913973] bprm_execve+0x49a/0x1940 [ 2106.914270] ? _copy_from_user+0x5c/0xf0 [ 2106.914552] ? __pfx_bprm_execve+0x10/0x10 [ 2106.914874] ? copy_strings.isra.0+0x551/0x850 [ 2106.915188] do_execveat_common+0x734/0x8e0 [ 2106.915514] ? __pfx_do_execveat_common+0x10/0x10 [ 2106.915853] __x64_sys_execveat+0xe4/0x130 [ 2106.916169] do_syscall_64+0x3f/0x90 [ 2106.916423] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2106.916819] RIP: 0033:0x7f27b14f4b19 [ 2106.917070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.918391] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2106.918878] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2106.919341] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2106.919801] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2106.920265] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2106.920716] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2106.921174] [ 2106.942537] Bluetooth: Unexpected continuation frame (len 4) [ 2106.947029] Bluetooth: Unexpected continuation frame (len 4) 13:13:49 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 55) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:13:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:13:49 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:13:49 executing program 5: syz_emit_vhci(0x0, 0x9) 13:13:49 executing program 3: syz_emit_vhci(0x0, 0x0) [ 2106.977978] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2106.978011] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:13:49 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) 13:13:49 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b"], 0x110) [ 2107.053994] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2107.054035] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2107.063492] FAULT_INJECTION: forcing a failure. [ 2107.063492] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.066273] CPU: 0 PID: 10218 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2107.067304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2107.068322] Call Trace: [ 2107.068669] [ 2107.068969] dump_stack_lvl+0xc1/0xf0 [ 2107.069477] should_fail_ex+0x4b4/0x5b0 [ 2107.070016] ? security_prepare_creds+0x116/0x190 [ 2107.070646] should_failslab+0x9/0x20 [ 2107.071146] __kmem_cache_alloc_node+0x66/0x310 [ 2107.071786] ? security_prepare_creds+0x116/0x190 [ 2107.072412] ? security_prepare_creds+0x116/0x190 [ 2107.073049] __kmalloc+0x4d/0x160 [ 2107.073514] security_prepare_creds+0x116/0x190 [ 2107.074139] prepare_creds+0x509/0x6f0 [ 2107.074654] prepare_exec_creds+0x11/0x260 [ 2107.075197] bprm_execve+0xcf/0x1940 [ 2107.075701] ? _copy_from_user+0x5c/0xf0 [ 2107.076241] ? __pfx_bprm_execve+0x10/0x10 [ 2107.076784] ? copy_strings.isra.0+0x551/0x850 [ 2107.077388] do_execveat_common+0x734/0x8e0 [ 2107.077949] ? __pfx_do_execveat_common+0x10/0x10 [ 2107.078585] __x64_sys_execveat+0xe4/0x130 [ 2107.079133] do_syscall_64+0x3f/0x90 [ 2107.079632] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2107.080295] RIP: 0033:0x7f4229166b19 [ 2107.080764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2107.082949] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2107.083900] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2107.084788] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2107.085690] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2107.086584] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2107.087480] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2107.088414] 13:14:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 57) 13:14:00 executing program 6: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x50, 0x6, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000040}, 0x24000800) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x80000000}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r4}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r4, 0x29, 0xaa, 0x3, 0x9b4b, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8000, 0x0, 0x1, 0x1}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040000000100000000", @ANYRESHEX=r0], 0x9) 13:14:00 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:14:00 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) 13:14:00 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:14:00 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 55) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:00 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 56) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:14:00 executing program 3: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed}}}, 0x9) [ 2117.641053] FAULT_INJECTION: forcing a failure. [ 2117.641053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2117.642072] CPU: 1 PID: 10238 Comm: syz-executor.0 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2117.642609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2117.643154] Call Trace: [ 2117.643328] [ 2117.643489] dump_stack_lvl+0xc1/0xf0 [ 2117.643765] should_fail_ex+0x4b4/0x5b0 [ 2117.644056] _copy_to_user+0x30/0xc0 [ 2117.644326] simple_read_from_buffer+0xd0/0x170 [ 2117.644651] proc_fail_nth_read+0x1a6/0x290 [ 2117.644968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2117.645305] ? security_file_permission+0xb5/0xe0 [ 2117.645643] vfs_read+0x1de/0x8f0 [ 2117.645889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2117.646220] ? __pfx_vfs_read+0x10/0x10 [ 2117.646506] ? __fget_files+0x267/0x480 [ 2117.646807] ksys_read+0x122/0x250 [ 2117.647059] ? __pfx_ksys_read+0x10/0x10 [ 2117.647343] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2117.647705] do_syscall_64+0x3f/0x90 [ 2117.647977] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2117.648329] RIP: 0033:0x7fa4da33169c [ 2117.648583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2117.649789] RSP: 002b:00007fa4d78f4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2117.650312] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa4da33169c [ 2117.650816] RDX: 000000000000000f RSI: 00007fa4d78f41e0 RDI: 0000000000000005 [ 2117.651319] RBP: 00007fa4d78f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2117.651849] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2117.652352] R13: 00007ffd9dcc23ff R14: 00007fa4d78f4300 R15: 0000000000022000 [ 2117.652865] [ 2117.654811] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2117.654832] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2117.654866] Bluetooth: hci4: Received unexpected HCI Event 0x00 13:14:00 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) [ 2117.755088] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 2117.816843] Bluetooth: hci7: Received unexpected HCI Event 0x00 13:14:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:14:11 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 57) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:14:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:14:11 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 13:14:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce9101"], 0x110) 13:14:11 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 56) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:11 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c91010e1981ea63f1669d126f72e66148d6d01837c92e30400bb2c0010271c3fc59cedad5b7b4b6b2956e368a182ba4a66faf5326392493079cd7345cca921a0d84a922f81f2a06d4478e78285ef4c1c4fe8aca58daeb5eae7bf50591d5a398e29ce1b8319d3686ce7"], 0x11) 13:14:11 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x50, 0x6, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000040}, 0x24000800) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x80000000}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r4}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r4, 0x29, 0xaa, 0x3, 0x9b4b, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8000, 0x0, 0x1, 0x1}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040000000100000000", @ANYRESHEX=r0], 0x9) 13:14:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system/posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2129.502357] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2129.507739] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2129.507774] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:14:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2129.533178] Bluetooth: Unexpected continuation frame (len 12) [ 2129.535520] Bluetooth: Unexpected continuation frame (len 12) 13:14:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) [ 2129.572698] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2129.588369] FAULT_INJECTION: forcing a failure. [ 2129.588369] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.590539] CPU: 0 PID: 10266 Comm: syz-executor.1 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2129.591605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2129.592659] Call Trace: [ 2129.593007] [ 2129.593320] dump_stack_lvl+0xc1/0xf0 [ 2129.593846] should_fail_ex+0x4b4/0x5b0 [ 2129.594408] should_failslab+0x9/0x20 [ 2129.594933] kmem_cache_alloc_lru+0x7a/0x680 [ 2129.595545] ? __d_alloc+0x31/0x9c0 [ 2129.596079] ? __d_alloc+0x31/0x9c0 [ 2129.596580] __d_alloc+0x31/0x9c0 [ 2129.597072] d_alloc_parallel+0x10e/0x1640 [ 2129.597657] ? __d_lookup+0x247/0x4a0 [ 2129.598191] ? lock_release+0x1e3/0x680 [ 2129.598739] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2129.599509] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2129.600167] ? lock_is_held_type+0x9f/0x120 [ 2129.600776] ? __d_lookup+0x269/0x4a0 [ 2129.601320] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2129.602029] lookup_open.isra.0+0x909/0x1400 [ 2129.602655] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2129.603330] ? lookup_fast+0x14e/0x530 [ 2129.603900] path_openat+0x96c/0x2710 [ 2129.604458] ? __pfx_path_openat+0x10/0x10 [ 2129.605051] ? __lock_acquire+0x19b1/0x6340 [ 2129.605658] do_filp_open+0x1ba/0x410 [ 2129.606196] ? __pfx_do_filp_open+0x10/0x10 [ 2129.606809] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2129.607509] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2129.608216] ? lock_release+0x1e3/0x680 [ 2129.608786] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2129.609596] ? __pfx_lock_release+0x10/0x10 [ 2129.610214] do_open_execat+0x10d/0x3c0 [ 2129.610712] ? __pfx_do_open_execat+0x10/0x10 [ 2129.611338] ? sched_mm_cid_before_execve+0x249/0x360 [ 2129.612067] bprm_execve+0x49a/0x1940 [ 2129.612609] ? _copy_from_user+0x5c/0xf0 [ 2129.613197] ? __pfx_bprm_execve+0x10/0x10 [ 2129.613781] ? copy_strings.isra.0+0x551/0x850 [ 2129.614422] do_execveat_common+0x734/0x8e0 [ 2129.615023] ? __pfx_do_execveat_common+0x10/0x10 [ 2129.615649] __x64_sys_execveat+0xe4/0x130 [ 2129.616251] do_syscall_64+0x3f/0x90 [ 2129.616772] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2129.617492] RIP: 0033:0x7f27b14f4b19 [ 2129.618009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2129.620362] RSP: 002b:00007f27aea6a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2129.621375] RAX: ffffffffffffffda RBX: 00007f27b1607f60 RCX: 00007f27b14f4b19 [ 2129.622323] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2129.623256] RBP: 00007f27aea6a1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2129.624224] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2129.625183] R13: 00007ffe99e9437f R14: 00007f27aea6a300 R15: 0000000000022000 [ 2129.626166] 13:14:12 executing program 3: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 13:14:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 13:14:12 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x9) [ 2129.663106] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2129.712383] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2129.712430] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2129.716564] FAULT_INJECTION: forcing a failure. [ 2129.716564] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.719534] CPU: 0 PID: 10269 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2129.720533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2129.721527] Call Trace: [ 2129.721856] [ 2129.722148] dump_stack_lvl+0xc1/0xf0 [ 2129.722667] should_fail_ex+0x4b4/0x5b0 [ 2129.723186] ? alloc_empty_file+0x76/0x1e0 [ 2129.723765] should_failslab+0x9/0x20 [ 2129.724290] kmem_cache_alloc+0x61/0x390 [ 2129.724847] alloc_empty_file+0x76/0x1e0 [ 2129.725369] path_openat+0xd8/0x2710 [ 2129.725880] ? __pfx_path_openat+0x10/0x10 [ 2129.726411] ? __lock_acquire+0x19b1/0x6340 [ 2129.727002] do_filp_open+0x1ba/0x410 [ 2129.727492] ? __pfx_do_filp_open+0x10/0x10 [ 2129.728087] ? __pfx___lock_acquire+0x10/0x10 [ 2129.728678] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2129.729332] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2129.729958] ? perf_trace_preemptirq_template+0x252/0x420 [ 2129.730688] ? lock_release+0x1e3/0x680 [ 2129.731207] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2129.731993] ? __pfx_lock_release+0x10/0x10 [ 2129.732548] do_open_execat+0x10d/0x3c0 [ 2129.733076] ? __pfx_do_open_execat+0x10/0x10 [ 2129.733656] ? sched_mm_cid_before_execve+0x249/0x360 [ 2129.734342] bprm_execve+0x49a/0x1940 [ 2129.734836] ? _copy_from_user+0x5c/0xf0 [ 2129.735394] ? __pfx_bprm_execve+0x10/0x10 [ 2129.735947] ? copy_strings.isra.0+0x551/0x850 [ 2129.736561] do_execveat_common+0x734/0x8e0 [ 2129.737111] ? __pfx_do_execveat_common+0x10/0x10 [ 2129.737768] __x64_sys_execveat+0xe4/0x130 [ 2129.738312] do_syscall_64+0x3f/0x90 [ 2129.738816] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2129.739472] RIP: 0033:0x7f4229166b19 [ 2129.739973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2129.742150] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2129.743132] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2129.744027] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2129.744950] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2129.745865] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2129.746743] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2129.747697] 13:14:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaa"], 0x110) 13:14:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x02', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:14:12 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) [ 2129.801031] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2129.801076] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2129.885935] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2129.886030] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:14:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaa"], 0x110) 13:14:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 58) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:14:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 13:14:26 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xfffffffffffffff8, 0x6, 0x5}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x31, 0x20, 0xd8, 0x0, 0x3, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0xffffffffffff572e, 0x10000}, 0x8000, 0x9, 0x9, 0x9, 0x0, 0x7, 0x1ff, 0x0, 0x5}, 0x0, 0x4, r1, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xc3, 0xc8, 0x9}}}, 0x6) 13:14:26 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101"], 0x110) 13:14:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x04', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:14:26 executing program 3: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000340)='\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', 0x0], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000440), 0x0, 0x0) recvmmsg(r0, &(0x7f000000b2c0), 0x0, 0x0, 0x0) [ 2143.788920] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2143.788967] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2143.808669] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2143.808707] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2143.834169] Bluetooth: Unexpected continuation frame (len 4) [ 2143.840504] Bluetooth: Unexpected continuation frame (len 4) 13:14:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c700f77395"], 0x9) 13:14:26 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea79082d76d33e18207bb1ce9f014aba0000"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xd2}, @l2cap_cid_signaling={{0xce}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x5}}, @l2cap_conf_req={{0x4, 0xd5, 0x38}, {0x2, 0x1f, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x2, 0xa, 0x4, 0x6, 0x1000}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0xfa, 0xf1a5, 0x4, 0xff}}, @l2cap_conf_flushto={0x2, 0x2, 0x6d}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2e, 0x26, 0x467, 0x4, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4c, 0x1, 0x9, 0xfffe, 0x5}}]}}, @l2cap_conf_rsp={{0x5, 0xb4, 0x4c}, {0x7b31, 0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2, 0xfff}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xff, 0x40, 0x1, 0x5, 0xff7f}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0x4, 0x6, 0x3}}, @l2cap_conf_mtu={0x1, 0x2, 0x2e1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x1, 0x1000, 0x3ff, 0x40}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1f, 0x2}, {0x401}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x800, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x1, 0x6, 0x5, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x400, 0x1f}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9d8, 0x401, 0x9, 0x888}}]}}, 0xd7) 13:14:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 59) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:14:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaa"], 0x110) 13:14:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x05', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2143.888786] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2143.888830] Bluetooth: hci2: unexpected subevent 0x03 length: 268 > 9 [ 2143.892165] Bluetooth: Unexpected continuation frame (len 210) [ 2143.893172] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2143.893204] Bluetooth: hci2: unexpected subevent 0x03 length: 268 > 9 13:14:26 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:14:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system/posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:14:26 executing program 3: syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000340)='\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', 0x0], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000440), 0x0, 0x0) recvmmsg(r0, &(0x7f000000b2c0), 0x0, 0x0, 0x0) [ 2143.910202] Bluetooth: hci5: SCO packet for unknown connection handle 199 [ 2143.961466] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2143.962520] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2143.970899] Bluetooth: Unexpected continuation frame (len 4) [ 2143.978483] FAULT_INJECTION: forcing a failure. [ 2143.978483] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.979357] CPU: 0 PID: 10320 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2143.979888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.980426] Call Trace: [ 2143.980613] [ 2143.980776] dump_stack_lvl+0xc1/0xf0 [ 2143.981051] should_fail_ex+0x4b4/0x5b0 [ 2143.981336] ? security_file_alloc+0x38/0x170 [ 2143.981647] should_failslab+0x9/0x20 [ 2143.981908] kmem_cache_alloc+0x61/0x390 [ 2143.982195] security_file_alloc+0x38/0x170 [ 2143.982490] init_file+0x99/0x250 [ 2143.982740] alloc_empty_file+0x94/0x1e0 [ 2143.983030] path_openat+0xd8/0x2710 [ 2143.983299] ? __pfx_path_openat+0x10/0x10 [ 2143.983590] ? __lock_acquire+0x19b1/0x6340 [ 2143.983900] do_filp_open+0x1ba/0x410 [ 2143.984171] ? __pfx_do_filp_open+0x10/0x10 [ 2143.984462] ? __pfx___lock_acquire+0x10/0x10 [ 2143.984775] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2143.985115] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 2143.985457] ? perf_trace_preemptirq_template+0x252/0x420 [ 2143.985838] ? lock_release+0x1e3/0x680 [ 2143.986114] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2143.986516] ? __pfx_lock_release+0x10/0x10 [ 2143.986816] do_open_execat+0x10d/0x3c0 [ 2143.987087] ? __pfx_do_open_execat+0x10/0x10 [ 2143.987392] ? sched_mm_cid_before_execve+0x249/0x360 [ 2143.987746] bprm_execve+0x49a/0x1940 [ 2143.988013] ? __pfx_bprm_execve+0x10/0x10 [ 2143.988310] ? copy_strings.isra.0+0x551/0x850 [ 2143.988628] do_execveat_common+0x734/0x8e0 [ 2143.988918] ? __pfx_do_execveat_common+0x10/0x10 [ 2143.989258] __x64_sys_execveat+0xe4/0x130 [ 2143.989569] do_syscall_64+0x3f/0x90 [ 2143.989842] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2143.990219] RIP: 0033:0x7f4229166b19 [ 2143.990487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.991747] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2143.992294] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2143.992797] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2143.993295] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2143.993793] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2143.994282] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2143.994795] 13:14:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2144.022090] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2144.074718] Bluetooth: hci4: Received unexpected HCI Event 0x00 13:14:39 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system/posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:39 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 60) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:14:39 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x02', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\a', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:14:39 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 13:14:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:14:39 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xd8, &(0x7f0000000040)={[{0x33, 0x4e00, "27bc0ef27f68a1b9122eb6d906680399f6db6d41e230ff2e7a23ad69eefa06fbfc6a18e79dd04db654313f6f2ad5cc2e000000"}, {0x9a, 0x4e00, "fbd78adb32505be2ed3fb5571be5a5b8a9758f62143e13c6aa7c9dbfdbd4d701c117e3d9415c1a9b9608e932223750ebd24eb0d34cb0f1309c81355484ba5c8f505e3ec42814effaa86c835dc60b913e3cfe4a85ecf3fb797a71aeba1c5372f30b1ce9ffcab5d33c2cfcef37420916b1dac70f7018eb312cc8cfb34444a891de27fa919f83be8f0adf697c61c2dd316389e6c3ad30fe635997c8"}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x128, &(0x7f0000000140)={[{0xf4, 0x4e00, "69d4254cc703e729f835b9477c73008463d9b39ab277bbd4195c2faef09a2be52f45bc58ea52311ea5e9c8c096853816e18b326ee719aa298a9c0a128a0e02d8d203b22b2f14e4a2a0460659ec05e8f863eac09c53e5e0f8632a176cb58daf8c3ee102a6820ae295bed40a0ff1eb8aa12517bd83c65f0cdd548f8c1e55954e796edab6e359f530cfa45aabe392ce035a65f97b42b0493c5775f3fcab6d70ee505eb58b472cfced92e3a62ff48e65cc9b1a8f50e7027b772c19f6d4108b8c5665f2daa14c8b18ab7d0bf7938ea709c8cc04c25945a42e373371fceb115fab8b1b15eef0e8c177b525509a27c6429b2d9477b6813c"}, {0x2c, 0x4e00, "28894c22f14b1a692909e58bd485598aca8dd8d9ba000c07e5404e83298b596815d0368c62d5e429b43db6ff"}]}) 13:14:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="04000100000000"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xff}, "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"}, 0x103) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x1, 0xc}, {0x101, 0x8000, 0x400, 0x6, [0x8, 0xfc5]}}}}, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x194, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x28}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8000000}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf8}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xffff}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x13b, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x1ff, @val=0x7, @val=0x9, @void}}, @mesh_chsw={0x76, 0x6, {0x40, 0x6, 0x1d, 0x8001}}, @perr={0x84, 0x11c, {0x8, 0x12, [@not_ext={{}, @broadcast, 0x1, "", 0x4}, @not_ext={{}, @device_a, 0x5, "", 0x37}, @ext={{}, @broadcast, 0x7, @device_a, 0x25}, @ext={{}, @device_a, 0x1, @device_a, 0x38}, @not_ext={{}, @broadcast, 0x7, "", 0x13}, @ext={{}, @device_b, 0x6, @device_a, 0x15}, @ext={{}, @broadcast, 0x8001, @broadcast, 0x16}, @ext={{}, @device_b, 0x7, @broadcast, 0x42}, @ext={{}, @device_a, 0x0, @device_b, 0x19}, @ext={{}, @broadcast, 0xab, @device_a, 0x2d}, @not_ext={{}, @device_b, 0x4, "", 0x1b}, @not_ext={{}, @device_b, 0x3, "", 0x37}, @ext={{}, @device_a, 0x6, @device_b, 0x24}, @not_ext={{}, @device_a, 0x1, "", 0x3a}, @not_ext={{}, @device_b, 0x1, "", 0x3e}, @not_ext={{}, @device_a, 0x7, "", 0x2a}, @not_ext={{}, @device_b, 0x400, "", 0x39}, @not_ext={{}, @device_b, 0x527d7652, "", 0x24}]}}, @ibss={0x6, 0x2, 0x7}, @challenge={0x10, 0x1, 0xe5}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4040005}, 0x8800) 13:14:39 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) [ 2157.261077] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2157.262320] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2157.262343] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2157.263710] Bluetooth: hci2: Dropping invalid advertising data [ 2157.264393] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2157.265136] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 2157.269125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10349 comm=syz-executor.6 13:14:39 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea79082d76d33e18207bb1ce9f014aba0000"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xd2}, @l2cap_cid_signaling={{0xce}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x5}}, @l2cap_conf_req={{0x4, 0xd5, 0x38}, {0x2, 0x1f, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x2, 0xa, 0x4, 0x6, 0x1000}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0xfa, 0xf1a5, 0x4, 0xff}}, @l2cap_conf_flushto={0x2, 0x2, 0x6d}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2e, 0x26, 0x467, 0x4, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4c, 0x1, 0x9, 0xfffe, 0x5}}]}}, @l2cap_conf_rsp={{0x5, 0xb4, 0x4c}, {0x7b31, 0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2, 0xfff}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xff, 0x40, 0x1, 0x5, 0xff7f}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0x4, 0x6, 0x3}}, @l2cap_conf_mtu={0x1, 0x2, 0x2e1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x1, 0x1000, 0x3ff, 0x40}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1f, 0x2}, {0x401}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x800, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x1, 0x6, 0x5, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x400, 0x1f}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9d8, 0x401, 0x9, 0x888}}]}}, 0xd7) 13:14:39 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 13:14:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\b', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2157.289828] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 2157.401281] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2157.401311] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2157.404704] Bluetooth: Unexpected continuation frame (len 210) [ 2157.764370] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2157.764422] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2157.766467] Bluetooth: hci2: Dropping invalid advertising data [ 2157.767374] Bluetooth: hci2: Malformed LE Event: 0x02 13:14:52 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x9) 13:14:52 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x110) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x26}, "db3da6f7904e38eeb02b0594551d41511b9d6116420e6ea611406d777d0404aaa0e50728b4de"}, 0x2a) 13:14:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_accessB', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:14:52 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea79082d76d33e18207bb1ce9f014aba0000"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xd2}, @l2cap_cid_signaling={{0xce}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x5}}, @l2cap_conf_req={{0x4, 0xd5, 0x38}, {0x2, 0x1f, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x2, 0xa, 0x4, 0x6, 0x1000}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0xfa, 0xf1a5, 0x4, 0xff}}, @l2cap_conf_flushto={0x2, 0x2, 0x6d}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2e, 0x26, 0x467, 0x4, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4c, 0x1, 0x9, 0xfffe, 0x5}}]}}, @l2cap_conf_rsp={{0x5, 0xb4, 0x4c}, {0x7b31, 0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2, 0xfff}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xff, 0x40, 0x1, 0x5, 0xff7f}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0x4, 0x6, 0x3}}, @l2cap_conf_mtu={0x1, 0x2, 0x2e1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x1, 0x1000, 0x3ff, 0x40}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1f, 0x2}, {0x401}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x800, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x1, 0x6, 0x5, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x400, 0x1f}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9d8, 0x401, 0x9, 0x888}}]}}, 0xd7) 13:14:52 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 61) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:14:52 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x2, 0x0, 0x6, 0x0, 0x7fffffff, 0x428, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x84, 0x0, @perf_config_ext={0x1, 0x1f}, 0x7205, 0x3ff, 0x8, 0x4, 0x3fffc0000, 0x3, 0x4, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x7, r0, 0x2) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:14:52 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x04', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2170.175829] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2170.175858] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2170.177332] Bluetooth: Unexpected continuation frame (len 210) [ 2170.188544] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2170.191757] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2170.196674] Bluetooth: Unexpected continuation frame (len 4) [ 2170.197548] Bluetooth: Unexpected continuation frame (len 4) [ 2170.202749] Bluetooth: hci4: Received unexpected HCI Event 0x00 13:14:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a"], 0x110) 13:14:52 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea79082d76d33e18207bb1ce9f014aba0000"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xd2}, @l2cap_cid_signaling={{0xce}, [@l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x5}}, @l2cap_conf_req={{0x4, 0xd5, 0x38}, {0x2, 0x1f, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x2, 0xa, 0x4, 0x6, 0x1000}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0xfa, 0xf1a5, 0x4, 0xff}}, @l2cap_conf_flushto={0x2, 0x2, 0x6d}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2e, 0x26, 0x467, 0x4, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4c, 0x1, 0x9, 0xfffe, 0x5}}]}}, @l2cap_conf_rsp={{0x5, 0xb4, 0x4c}, {0x7b31, 0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2, 0xfff}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xff, 0x40, 0x1, 0x5, 0xff7f}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x4, 0x4, 0x6, 0x3}}, @l2cap_conf_mtu={0x1, 0x2, 0x2e1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x1, 0x1000, 0x3ff, 0x40}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1f, 0x2}, {0x401}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x800, 0x2}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x1, 0x6, 0x5, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x400, 0x1f}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9d8, 0x401, 0x9, 0x888}}]}}, 0xd7) 13:14:52 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_create_chan_rsp={{0xd, 0x81, 0x8}, {0x5, 0x401, 0x752, 0xed4}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x1, 0xffff, 0x1000, 0x1ff}}, @l2cap_conf_rsp={{0x5, 0xbb, 0x1a}, {0x6, 0x401, 0x2806, [@l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x20}]}}, @l2cap_create_chan_rsp={{0xd, 0x2c, 0x8}, {0x3, 0x7fff, 0x3f, 0x1000}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x0, 0x8}}, @l2cap_disconn_req={{0x6, 0x81, 0x4}, {0x0, 0x200}}, @l2cap_move_chan_req={{0xe, 0xdf, 0x3}, {0x8, 0x3}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x0, 0x8001, 0x1, 0x1000}}]}}, 0x6e) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x82}, "d4e01c1dc87e5b2f506d586541c7198126b8a59d823db4946e7875fdd2f43ee48739f09b6c29a05f10629e1ef43aa334c30478191ae37964456f81116bed84ef174a5b7b067573812b48860df1e29becd2f9e6e8523318fadc536554e71ece5fc08463ee6402bb00728f57cad8ce0fe60791f37e2c642ce324cfc7d29e9d7ed18b55"}, 0x86) 13:14:52 executing program 5: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03df817ed28b33692735f4759999f26a19c9ceecae28abfdc503f36a1dce39d31c0d2672dfd517816d0859d461c4613c2cc31ac0493d397eb9fea456957d8e1441d57fe82d9aa5f4b8a36864f7c7e173c1c5b9509f892cacfd993db4fedbd769bc1047c4c02488611f644df5d08718f149b1885debb23ae686560cd979d348130f1d74a0e9ddcacfb8b16a6167b845ef2581210b1f7f224356ae4443000069d79e118ed9c9150c7c7672ece85fecd4da64dc949af90a2663a99e92346cf6586addc822fa9ecc535b69dea54882f25c53cde8f3d044c8fbe97f9c6a29ecc9cbf599c1674608ad30ca61c34c1c1f92aebdee861bf9778c73"], 0x9) [ 2170.248225] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2170.248248] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2170.250116] Bluetooth: Unexpected continuation frame (len 210) 13:14:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x100, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1], 0x110) [ 2170.282501] Bluetooth: hci5: SCO packet for unknown connection handle 479 [ 2170.286805] Bluetooth: hci5: SCO packet for unknown connection handle 479 [ 2170.294268] FAULT_INJECTION: forcing a failure. [ 2170.294268] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.295543] CPU: 1 PID: 10381 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2170.296082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.296634] Call Trace: [ 2170.296818] [ 2170.296977] dump_stack_lvl+0xc1/0xf0 [ 2170.297253] should_fail_ex+0x4b4/0x5b0 [ 2170.297549] should_failslab+0x9/0x20 [ 2170.297828] kmem_cache_alloc_lru+0x7a/0x680 [ 2170.298140] ? __d_alloc+0x31/0x9c0 [ 2170.298404] ? __d_alloc+0x31/0x9c0 [ 2170.298669] __d_alloc+0x31/0x9c0 [ 2170.298928] d_alloc_parallel+0x10e/0x1640 [ 2170.299231] ? __d_lookup+0x247/0x4a0 [ 2170.299509] ? lock_release+0x1e3/0x680 [ 2170.299794] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2170.300203] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2170.300543] ? lock_is_held_type+0x9f/0x120 [ 2170.300864] ? __d_lookup+0x269/0x4a0 [ 2170.301135] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2170.301507] lookup_open.isra.0+0x909/0x1400 [ 2170.301815] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2170.302160] ? lookup_fast+0x14e/0x530 [ 2170.302435] path_openat+0x96c/0x2710 [ 2170.302714] ? __pfx_path_openat+0x10/0x10 [ 2170.302999] ? __lock_acquire+0x19b1/0x6340 [ 2170.303306] do_filp_open+0x1ba/0x410 [ 2170.303575] ? __pfx_do_filp_open+0x10/0x10 [ 2170.303903] ? lock_acquire+0x19a/0x4c0 [ 2170.304208] ? sched_mm_cid_before_execve+0x23c/0x360 [ 2170.304610] ? lock_release+0x1e3/0x680 [ 2170.304908] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2170.305347] ? __pfx_lock_release+0x10/0x10 [ 2170.305678] do_open_execat+0x10d/0x3c0 [ 2170.305981] ? __pfx_do_open_execat+0x10/0x10 [ 2170.306327] ? sched_mm_cid_before_execve+0x249/0x360 [ 2170.306716] bprm_execve+0x49a/0x1940 [ 2170.307015] ? _copy_from_user+0x5c/0xf0 [ 2170.307334] ? __pfx_bprm_execve+0x10/0x10 [ 2170.307644] ? copy_strings.isra.0+0x551/0x850 [ 2170.307988] do_execveat_common+0x734/0x8e0 [ 2170.308322] ? __pfx_do_execveat_common+0x10/0x10 [ 2170.308693] __x64_sys_execveat+0xe4/0x130 [ 2170.309013] do_syscall_64+0x3f/0x90 [ 2170.309293] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2170.309673] RIP: 0033:0x7f4229166b19 [ 2170.309950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.311267] RSP: 002b:00007f42266dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2170.311822] RAX: ffffffffffffffda RBX: 00007f4229279f60 RCX: 00007f4229166b19 [ 2170.312343] RDX: 0000000020000480 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2170.312874] RBP: 00007f42266dc1d0 R08: 0000000000001000 R09: 0000000000000000 [ 2170.313392] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2170.313908] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2170.314446] 13:14:52 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x05', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:14:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x20, 0x1, 0x1823, 0x1, @mcast2, @remote, 0x10, 0x7800, 0x389d, 0x7311}}) bind$packet(r1, &(0x7f0000000600)={0x11, 0x3, r2, 0x1, 0x1, 0x6, @random="305678d13a3e"}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x44, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0xd1, 0xcc37}, 0x1, 0x200, 0x8141, 0x2, 0x2, 0x7, 0xba, 0x0, 0xffff, 0x0, 0x140000001}, 0x0, 0xb, r0, 0xb) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x3, 0x5, @link_local}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46400) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043ed279082d76d3ec18204db1ce910101aa0000000000000000000000000000000020b7dce5a6945c776b0939477dd80f48a6391d7219a23f3b1ca333b28e1cbc1234c9e70bee82612c698ae60398e3f42ab58e188b99d3cda1f6a171c91e9da53d4d8650e4bddd8465cda476c53aeac7a9e53517536da118be9e55d9038f17a80a1698eeeb72433f5379014a14fa3bff4c1d949a888fe8f8a6de129eb8a1bf78226b", @ANYBLOB="e828e0c7e03da0f9cdde038045e5a4e6b69cd9721953334821528b5a15a349fd950783e59a18c31e94ebe20f332571f81c4451cf59ee8073f215d0ebd827f506b4d1126b4c80335ebbe3fd5238e3220f18c692521557a744235b0b9f0991958836dbef1543c2fc8ea138d86e5b79bb449373458a4f0badbaf117d6bd4aecbe79eb793a15c16b650c9ac46a481edbdcad2a53c9b5dabb56c15560b491b86135226cacc3867c636f0a"], 0x110) [ 2170.348441] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2170.348463] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:14:52 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea79082d76d33e18207bb1ce9f014aba0000"], 0x110) [ 2170.356013] Bluetooth: Unexpected continuation frame (len 105) [ 2170.356533] Bluetooth: Unexpected continuation frame (len 105) 13:14:52 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0x9f7e, 0x9, [0x4, 0x895, 0x3ff, 0x800, 0xe5e7]}}}}, 0x1b) [ 2170.385062] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2170.385414] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2170.407680] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2170.408140] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 13:14:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/149, 0x95}], 0x4, 0x6, 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:14:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_accessC', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:14:52 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a"], 0x110) [ 2170.409345] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2170.445732] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2170.451420] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2170.452347] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2170.509930] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2170.511099] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:15:04 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea79082d76d33e18207bb1ce9f014aba0000"], 0x110) 13:15:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:15:04 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\a', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03cf872f1120e8050a9817d50801066f5f6c665e17822ad4311526cd11a05402adba34466ce6ce7403970a276d1d364223dc5f8b1f022ab4063552ba0745efe6b4a03a40a4958c799b178b2a4b569595ac9fe92268eb2fdd20299a41243ccce85377ab6c68a3a437f269"], 0x9) 13:15:04 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aaa7649a36cb0c48635878b4e55a69543fb8c4f7165b3ec9ad40b2e851406f281be7a8e22f76000000"], 0x110) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_cmd_rej_unk={{0x1, 0x99, 0x2}, {0x15b}}, @l2cap_move_chan_req={{0xe, 0x99, 0x3}, {0x80, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x100}}]}}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}}}, 0xd) 13:15:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 62) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:15:04 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x20001, r0, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="045a00ffffffff1eac"], 0xb) 13:15:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf0', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2182.310280] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2182.310326] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2182.312384] Bluetooth: hci2: Dropping invalid advertising data [ 2182.313636] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2182.313671] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2182.314028] Bluetooth: hci5: SCO packet for unknown connection handle 1999 [ 2182.314582] Bluetooth: hci2: Dropping invalid advertising data [ 2182.321251] Bluetooth: hci5: SCO packet for unknown connection handle 1999 [ 2182.328763] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2182.329856] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2182.333178] Bluetooth: hci4: Received unexpected HCI Event 0x00 13:15:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x47) 13:15:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="3d7ecf06e98c115654c21c2eb2c6cb41f0fd6d135612d283c9eb421e778734dc64", @ANYRESHEX, @ANYRES32=r3, @ANYRESDEC, @ANYRES32, @ANYBLOB="cae9e409bb2a9d23771e8ad0fa1322ea130bce83f71ecfc7f8af31eb0dd01c41c8508f93a87622ab1a4b48c12af5c14ef55e729a05b55d89d653c461d02bb165e6f3bb762081be744dcc93ff4c8a59322ec17a5a6261bea908a68b7a33122e08863ed3162b2ee028edc969d869a4c3c567e9b581f4755242eb3b3df5020e68438808af9b292e85ef80c2da7c936fc1c87ffac2749c0b65f11ebfff3931a1c1f74afd4a9f41a0bad83cdcb1975a602dd1ba573197805034", @ANYBLOB="af0cdfae0c1dc744fd60603582e84335ca180e906cacb254a8105491615f7bc83f1d8865fe723e30f40755bd948d0dc3cf37137f7e385ec4911291e815672036dac73bebd3a3d637f5a35409096105ccadaa91d329e853f9558619a90044ad9c15bd17b11cdb65bb35c592da0a6915e79e7d278da60a67723e4a491eecd02087af48a81c54efec7847d1d46b1cea411820aaa35626a28339fe78132708b94fb612e1f12f30cc1766f867d30dc6b557c3475b60d4e3541e436854c2b1f1bd544a3d221bafa51fc47979884e9bb5c252f3281225eab93b9aa655060bf9", @ANYRES64=r1], 0x9) 13:15:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_accesse', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:15:04 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x6, 0x4, 0x7f, 0x0, 0x93a6, 0xa0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb0d2, 0x2, @perf_bp={&(0x7f0000000180), 0xc}, 0x800, 0xfffffffffffffff9, 0x6, 0xe0b917e531e8fdf1, 0x4, 0x224e, 0x7f, 0x0, 0x4d, 0x0, 0x800}, 0xffffffffffffffff, 0x0, r0, 0xb) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="4cd4c416ff00aeb3306b3bf1aef62cc6bbb1a800fc5eee45f392a775bd61e389e0cb0000008addadbf83f5e5fdc2be034f18a9957bf69816c701906aa84ceb3dcaab89c4f5c366f80443b14464362765d2d637560c2a134e85a759452ebc277d14763835a4f434d814e375e26f65d58976db50241c178931abe46d68ec7056d7c900ce1211ca2027d8b71a6ec87d24"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x4}}]}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x70}, "43d080b05c9a7e14afcd9ca3f9ac7dda1081bc17c4614b2b37758620d2dd01c2a957922e51e0ebd5d925415516e4d940401e6aecbb6e9362ebdfac9677c6bd5f7d51a115dbd1548c4de6c9431235f51b2e9bcf3822aa12642a02123ef96398935a049b11e79417b2ea257a258a82d1bd"}, 0x74) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xec}, @l2cap_cid_signaling={{0xe8}, [@l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x7f, 0xd40f, 0x4}}, @l2cap_info_rsp={{0xb, 0xf3, 0x7f}, {0x8000, 0x3, "e952c7904752b8dea10a27597729457897ed57461de527b005be493ee7391c06796154170a3a43243ee13a21c4ea40eaecda65b4a66e69ad8dedca02e9ef950df316ff9e03dc81f39a1082eebf06034c74210b745434e2c76b7911a0a71e3c23b04fce833959aa7487b679f26a5fb56798fc869a6511db3bbb5e11"}}, @l2cap_conf_rsp={{0x5, 0x7, 0xa}, {0x75, 0x1, 0x200, [@l2cap_conf_flushto={0x2, 0x2, 0x9}]}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x9, 0x7ff}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x4, 0x9}}, @l2cap_conn_req={{0x2, 0xa0, 0x4}, {0xfffd, 0xba9}}, @l2cap_conf_req={{0x4, 0x75, 0x2c}, {0x0, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0x0, 0x0, 0x8, 0xffffffff}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x6, 0x40, 0x13f, 0xf331, 0x9}}]}}, @l2cap_info_req={{0xa, 0x40, 0x2}, {0x7ff}}]}}, 0xf1) 13:15:04 executing program 3: 13:15:04 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\b', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 63) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2182.466827] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2182.466880] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2182.469210] Bluetooth: hci2: unexpected event 0x17 length: 68 > 6 [ 2182.469262] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2182.469751] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2182.471080] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2182.471505] Bluetooth: hci2: unexpected event 0x17 length: 68 > 6 [ 2182.476798] Bluetooth: hci4: Received unexpected HCI Event 0x00 13:15:04 executing program 3: 13:15:04 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x63}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x40, 0x7f, "2ad0d9", 0x5e}, {@none, 0x0, 0xfa, 0x8, '\x00', 0x6}, {@any, 0x80, 0x1f, 0xb0, "47ffd0", 0x400}, {@any, 0x7, 0x5, 0x7, "ed0a1e", 0x3e7c}, {@any, 0x3, 0x0, 0x81, "43d33d", 0x1800}, {@none, 0x20, 0x5, 0x2, "e57f3a", 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1f, 0x40, 0x1f, "23155d", 0x5}]}}}, 0x66) 13:15:04 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aada89b53afcdbe69af207186311af482429e7408837dad2ae331839ce7d1ec7b8f08e4d2c998eee5dcf6fdb066f16d20de7d80da19e2639e284c48f9b588f9b034541b45798e0c7e742d8251b7a24dfdacec75987f3c6084147714ac80faf723a7e9a"], 0x110) 13:15:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2182.532497] Bluetooth: Unexpected continuation frame (len 4) [ 2182.533580] Bluetooth: Unexpected continuation frame (len 4) [ 2182.583263] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2182.583289] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2182.584284] Bluetooth: hci2: Dropping invalid advertising data [ 2182.584707] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2182.585774] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2182.585793] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2182.586920] Bluetooth: hci2: Dropping invalid advertising data [ 2182.587316] Bluetooth: hci2: Malformed LE Event: 0x02 13:15:16 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:15:16 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d61f10300aaaaaaaaaa1110a13f8b41d279082d7618207b0300000001aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x8, 0xc8}}}, 0x6) 13:15:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) getsockname(r0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000380)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", ""]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048001}, 0x8800) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="f579bc3ed2c28f2a0eef3834ffea9a31b7e03a5dbcbb015243ad93ca2d948737eb0e42ef37d22b70dba88bff5dd2fe0a3ce151ea855b3720198cebe13f87153e274e54b82e0258afb36c3cc57cfd9f4077f66eaed8d9d30ae269f60a191a6c851680815ade5c0a59f495daf0d93c61e97f4bb33227e76050059c0056792a32c3c97c4b672fbe86ceaac9750faae9a7b8316fb1863a03e8d34eae9375fe2e7655f7dca6940fd386c9b9723c043dfb3d6261c731e43a75a16a88fd31", @ANYRES16], 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r5, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x50}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dri_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r9) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x810, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd9}, "a0fbbc9129cfead8302d5d1c13730f0622eaf725fddaff07900c7a39fa2bdb7eb41c0be8c5525cae4381eda8c2ad2741b5a3276b7aab925e629069029b94fb7f019b83ba424eea4cd9e21ecb443aa9bad9670977e417ad35e695df0a9fbb6d4b5602c37f6688b379583b81e4e1a0f71c7d716357c72ff6e6490937972e527136608a51d79f97824d9f7aa91304912c9d8b63b02c4be5d032927444ccec4a94896ded6b7a3170c12828a9815f600e66a6ef0fc68562cfc8d879e3836e79e669cb058ae405881d043f6f84180bf63b89752aa9d189360c8283c5"}, 0xdd) 13:15:16 executing program 3: 13:15:16 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) (fail_nth: 64) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:15:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:16 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access=', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x20000000, @loopback, 0xe8a4}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x34}, "d8dd623bd8c2ff5bcc3b3bd71ea0f9a980c463ed75b8596fc7a4b279e1829692c7e5a1a93c07ac50ae2ece39809ab8f56ebfd0d2"}, 0x38) [ 2194.305481] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 13:15:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) [ 2194.305940] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2194.332009] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2194.332511] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2194.334280] Bluetooth: hci2: Dropping invalid advertising data [ 2194.355365] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2194.355386] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2194.357145] Bluetooth: hci2: Dropping invalid advertising data [ 2194.362985] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2194.430375] FAULT_INJECTION: forcing a failure. [ 2194.430375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.433538] CPU: 0 PID: 10482 Comm: syz-executor.7 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2194.434582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2194.435615] Call Trace: [ 2194.435957] [ 2194.436267] dump_stack_lvl+0xc1/0xf0 [ 2194.436802] should_fail_ex+0x4b4/0x5b0 [ 2194.437362] _copy_to_user+0x30/0xc0 [ 2194.437893] simple_read_from_buffer+0xd0/0x170 [ 2194.438537] proc_fail_nth_read+0x1a6/0x290 [ 2194.439126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2194.439795] ? security_file_permission+0xb5/0xe0 [ 2194.440444] vfs_read+0x1de/0x8f0 [ 2194.440957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2194.441609] ? __pfx_vfs_read+0x10/0x10 [ 2194.442162] ? __fget_files+0x267/0x480 [ 2194.442736] ksys_read+0x122/0x250 [ 2194.443236] ? __pfx_ksys_read+0x10/0x10 [ 2194.443783] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2194.444488] do_syscall_64+0x3f/0x90 [ 2194.445002] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2194.445702] RIP: 0033:0x7f422911969c [ 2194.445789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10483 comm=syz-executor.5 [ 2194.446205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2194.449381] RSP: 002b:00007f42266dc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2194.450371] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f422911969c [ 2194.451314] RDX: 000000000000000f RSI: 00007f42266dc1e0 RDI: 0000000000000005 [ 2194.452247] RBP: 00007f42266dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2194.453197] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000002 [ 2194.454138] R13: 00007ffc7b05502f R14: 00007f42266dc300 R15: 0000000000022000 [ 2194.455088] [ 2194.478478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10489 comm=syz-executor.5 13:15:28 executing program 3: syz_emit_vhci(0x0, 0x110) 13:15:28 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:15:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", ""]}, 0x24}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff84) 13:15:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) 13:15:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:15:28 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x8f', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:28 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="01001004000000014c"], 0x9) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x5, 0x20, 0x9, 0x0, 0x100000000, 0xe0000, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1010, 0x400, 0x8353, 0x7, 0xd9d, 0xcb09, 0x4, 0x0, 0x6, 0x0, 0x826}, r1, 0x0, r0, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03010052c154e73c543973efcf8d33f485443bb81cf11e3c1a088e686f5179d28882b36a45152c4ac4f4b99e7c92c37a707e8fd7ce37c3409b82e3849f8c672ede6a3dfeae4203030000009eb44b07"], 0x56) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3, 0x1, 0x1, 0xf8, "c1b33eeac66a77f1"}}}, 0x10) 13:15:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x10', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:28 executing program 3: syz_emit_vhci(0x0, 0x110) [ 2205.834861] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2205.834928] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:15:28 executing program 3: syz_emit_vhci(0x0, 0x110) [ 2205.847947] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2205.848932] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2205.849822] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2205.851507] Bluetooth: hci2: Dropping invalid advertising data [ 2205.852577] Bluetooth: hci2: unknown advertising packet type: 0xd7 [ 2205.852624] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2205.881771] Bluetooth: hci7: SCO packet for unknown connection handle 1 13:15:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:15:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 2205.888138] Bluetooth: hci7: SCO packet for unknown connection handle 1 [ 2205.919733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10518 comm=syz-executor.5 13:15:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:15:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\b', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:28 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:15:28 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7c}, "49cabf479ed36134ff1f4579a768540e211c0a38f7877e08a90c666a2d740615f26a5e2f50c523648eb2ce88c2061ce6373a9cb03f7efbb81d486ce830ec5fd534f2c54afc07213241bb34253543a6d5ef9247e599237d08504ee588c647fc7bc425afc90c0bfc94682c2a7524028d5b148f3cef2b9533ef56ddf52a"}, 0x80) [ 2205.933692] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2206.017866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10526 comm=syz-executor.5 13:15:28 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xcb', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2206.019787] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2206.036693] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2206.037632] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2206.039501] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2206.039531] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:15:28 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system/posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2206.096676] Bluetooth: Unexpected continuation frame (len 4) [ 2206.098052] Bluetooth: Unexpected continuation frame (len 27) [ 2206.101426] Bluetooth: Unexpected continuation frame (len 4) [ 2206.103470] Bluetooth: Unexpected continuation frame (len 27) 13:15:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d02"], 0x110) 13:15:40 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x02', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:15:40 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:15:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:40 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xce', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:40 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x20, 0xc8, 0x84}}}, 0x7) 13:15:40 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9100c0008007539a2725bcc85400520"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x81, 0x4}, {0x6, 0xbe}}}}, 0x11) 13:15:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) [ 2217.956588] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2217.956665] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2217.959542] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2217.959578] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2217.970963] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2217.971001] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2217.986156] Bluetooth: Unexpected continuation frame (len 12) 13:15:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x1c, r4, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x20004814) [ 2217.993853] Bluetooth: Unexpected continuation frame (len 12) 13:15:40 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:15:40 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xd0', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d02"], 0x110) 13:15:40 executing program 6: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c932af10040000004d5885488703c65e1d2e700b0abaab3a6a8c7f5fee5447d85377f9a8230c9da7b4cd48fb4af51a6f8e7819a4826bf52cff8bce9dc8e4ea75ae113ce8e8cbb80f8db6048435e82d3e169fc7b3ecde71b98ccf0cb62fb46802b7490caed6"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 13:15:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf5', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:40 executing program 5: ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="e0", @ANYRESOCT], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a0000000400018004000180"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x3ff, 0x30, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2218.087487] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2218.087536] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2218.100032] Bluetooth: hci7: ACL packet for unknown connection handle 713 [ 2218.104667] Bluetooth: hci7: ACL packet for unknown connection handle 713 13:15:40 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:15:40 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x04', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:15:40 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 13:15:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d02"], 0x110) [ 2218.222674] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2218.222721] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2218.224544] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2218.224576] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2218.229356] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2218.229394] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:15:51 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x05', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:15:51 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x5e}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x5, 0x8}, {0x401, 0x401, [0x7, 0x9964]}}}}, 0x15) 13:15:51 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x20080, 0x9) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0241d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x5e}, "69b210ed00def493f67b367b5fde08a818181251a2a4afaf1f4a0b47d300a86fbf91a849ac6e2d586daad4c2c73729b620c9df38bb286cfef07360409ff92d845f29d90c7d16a1882043b9c2f88b7a89b9d367036396a725e72585653b67"}}, 0x61) 13:15:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:15:51 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:15:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 13:15:51 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xd1', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:15:51 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d02"], 0x110) 13:15:51 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\a', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2229.409072] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2229.409111] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2229.410428] Bluetooth: hci2: Dropping invalid advertising data [ 2229.411066] Bluetooth: hci2: unknown advertising packet type: 0x2f [ 2229.411080] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2229.422810] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2229.422830] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2229.423899] Bluetooth: hci2: Dropping invalid advertising data [ 2229.424300] Bluetooth: hci2: Malformed LE Event: 0x02 13:15:51 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xf0', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2229.448719] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2229.448743] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2229.450868] Bluetooth: Unexpected continuation frame (len 16) 13:16:02 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d02"], 0x110) 13:16:02 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access?', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:02 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x69e, 0x6, 0x4, 0x6}}}}, 0x15) 13:16:02 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0xf4, 0x26, 0x0, 0x0, 0x80008, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3162, 0xffffffffffffffff}, 0x1240, 0x4, 0x40, 0x2, 0xffff, 0x400, 0x5, 0x0, 0x0, 0x0, 0x11}, r3, 0x6, r0, 0x1) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e8, r7, 0x822, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99e7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb95}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2feb6daa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x97, 0x3, "b6641b8987b2604a923135a560eb56d7f57abdc025915ac3a37d1eee372f68c508e013dd2f431181099520dc0747d0650878a9760e56060add0b38759546db0b2911569c8b5ab759526da930a4e4b6f407a4d1c31f5060ccdfe7c01a8a9a4b8ba605c1959efc48f2c4ee9410622ce8bb3c52b777fd0d70d3eb3c8c3bb5c254481382bc7a41cb7efcc67d308936219bf5c22b20"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6a}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x6, 0x0, 0x3f, 0x0, 0x3, 0xb800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0x25f}, 0x40090, 0x6, 0x6, 0x8, 0x10000, 0x0, 0x2749, 0x0, 0x2, 0x0, 0x20}, 0xffffffffffffffff, 0xb, r4, 0x5) r8 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3, 0x7, &(0x7f0000000640)=[{&(0x7f0000001280)="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", 0x1000, 0x5}, {&(0x7f0000000240)="a94e7595b047961c8cc51607fcba364432ada7309f", 0x15, 0x8}, {&(0x7f0000000280)="fa6fccc051b6433f4f7a93677fb10789a72fc7af94ddeb6fd96eaed1fe67dc0be5adb0c7d4c29de95559726e3b88bc62018f88865b3b8461165e5f673fb8457384af740aeaedd88ac8bbf5aa073d5953577489694f72cd054dd8580fd6744af2f9be5b46c243c017e1f2b36463b2d5436e85b473168c7400752a6a866e438528e010585b03d9349499d637ed5478cd6c4897fd4c3880bd2727f589755056f5c31731ee1f3ac5a6025565703c9f1c8710f6491ab9ebef7d5e1b538eeeb0398fae6baf", 0xc2, 0x6}, {&(0x7f0000000380)="613a12b1fb8deb729cc3c3e4e7532172f5c303594e35ba6a89045c85057312e9b0965caedbd74d1654fa6807f9aa07b3b6a2b17661ebc79d750368c644294e226684a509d9b93824b9424c70c7277c23f0a2594e82414c90c3f99e6368d0fab288d36926ef38e877c8c9748476d42331f5bb6840188fd286f947e6fed88ae4f6f69bf5e68b02d1a443849c2f09e75b98da5dbe377dab8ca87ed80601d8ccec0a9eae8e38f7b2404220556598b78d884375d021f76e", 0xb5, 0x68}, {&(0x7f0000000440)="f7c57f324f43a70a513c28ed5fdd822cb1a380a5480c27254fa7a5de87fbe6a6381e1dbb68b144d15b81031df08e9405b318ae1dda4d73b05521c3c9271d2a7de950e518e67578e777d0ffa64b997be2a004ed8930319dd8cb11a8411b1dc92e7cecff67c8b3e4cb485215b872e3749b65aec724564db690b0f3bf528a6255142a2d76ad2aa0fda42a83d575e309837650d60464c0f563c88c60879ca59b0314ae7a73ea24", 0xa5, 0x7fffffff}, {&(0x7f0000000500)="1ef07a3e06d8bb78729576d0ebde72c2f90b856bc811482e57208c8dbc3d7994a6092a223b1740ecf24efd417004d652734836d52b42dd703f0653bc702d6de3ed47a65ab970adf5140298edf2e72a2836a1e2e1b6e40ba9b3d0bbd0adb720629e3cbc5524e67207881a8e00b033d74cb50cf46c982aac86657b7cc3300f2df9c8ecf311772c92ddfb36ca1adc49df344eace6a6cb13818d22b61edbd636dfb3912bf213bb6c8629faa1c787285aaa24cd0f7b773bdbdea9fe0a20630ff4799bdbf155717574b71ea8a8e2794035f2388977f1cb1e03c472d5c686f90e793d79dfb32f7dbc645d6330ab0fd9", 0xec, 0xa0}, {&(0x7f0000000600)="1615bc824f3b29244b818cee2586a33d77", 0x11, 0x3ff}], 0x10414, &(0x7f0000000700)={[{@utf8no}, {@shortname_mixed}, {@rodir}], [{@permit_directio}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@fsname={'fsname', 0x3d, 'wlan1\x00'}}]}) fremovexattr(r8, &(0x7f00000007c0)=@known='system.sockprotoname\x00') 13:16:02 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:16:02 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x2f}, @l2cap_cid_signaling={{0x2b}, [@l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x1, 0x400, 0x3}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x9, 0x2}}, @l2cap_disconn_req={{0x6, 0x80, 0x4}, {0x2, 0x9827}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x200}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x9, 0xfff8, 0xff, 0x8a}}]}}, 0x34) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 13:16:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:02 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\b', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2240.284096] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2240.284127] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2240.286847] Bluetooth: Unexpected continuation frame (len 47) [ 2240.287560] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2240.287579] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2240.288558] Bluetooth: hci2: Dropping invalid advertising data [ 2240.288972] Bluetooth: hci2: unknown advertising packet type: 0x8a [ 2240.289115] Bluetooth: Unexpected continuation frame (len 47) [ 2240.309644] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2240.312177] Bluetooth: Wrong link type (-22) [ 2240.315046] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2240.329205] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2240.329702] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2240.357417] Bluetooth: Unexpected continuation frame (len 4) 13:16:02 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d02"], 0x110) 13:16:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect(r0, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x1}, 0x1c) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 13:16:02 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access8', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2240.375198] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2240.375220] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:16:02 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x94}, @l2cap_cid_signaling={{0x90}, [@l2cap_conn_req={{0x2, 0x8, 0x4}, {0x400, 0x6}}, @l2cap_info_rsp={{0xb, 0x9, 0x3c}, {0x3, 0xff, "a981aa208125913b1af95915e5ee6a76e002a097d2218039156ec92235fb808626f74b4de1305c73e140fc9634431aacc0577aed3cd3072b"}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0xe2, 0x9d, 0x7, 0x4}}, @l2cap_conf_req={{0x4, 0x0, 0x13}, {0x6, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x200}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x6, 0x7, 0x200}}]}}, @l2cap_info_req={{0xa, 0xff, 0x2}, {0x1}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x0, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x2}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x5, 0x6, 0x9, 0xd497}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0xffff}}]}}, 0x99) 13:16:02 executing program 2: 13:16:02 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_accessf', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2240.418640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz-executor.6 13:16:02 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea"], 0x110) [ 2240.451182] Bluetooth: Unexpected continuation frame (len 4) 13:16:02 executing program 2: 13:16:02 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access:', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:16:02 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2240.500771] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2240.500795] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2240.504641] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2240.504661] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2240.505671] Bluetooth: hci2: Dropping invalid advertising data [ 2240.506090] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2240.507726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10648 comm=syz-executor.6 [ 2240.552737] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2240.552760] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 13:16:15 executing program 2: 13:16:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea"], 0x110) 13:16:15 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:15 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="039114aaf3137384d6be1387f892abb69f78fb399834f71afc82529a3ae745e7cd8a3d07d3a94dbc02000000000000001a7fae2b8f24293086c8a08c9592a66acb00000000000000000000000000000000990e32c7"], 0x9) 13:16:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x6, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0xfc}}}, 0xe) 13:16:15 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x40000000}) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) 13:16:15 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access;', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2252.608878] Bluetooth: hci5: SCO packet for unknown connection handle 1169 13:16:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 2252.609101] Bluetooth: hci5: SCO packet for unknown connection handle 1169 [ 2252.639325] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2252.640333] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2252.651017] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2252.651057] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2252.653252] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2252.653286] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2252.655136] Bluetooth: hci2: unknown advertising packet type: 0xaa [ 2252.663292] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2252.664957] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2252.691780] Bluetooth: Unexpected continuation frame (len 4) 13:16:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa091110a13f8b38ea"], 0x110) 13:16:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe6}, "931dd84f63674f5a9b3d05db8715e9e3b56b2bd40c9461d03b860334106e4ed40a3de1f22c8a231668d68e8760465d5b4abfdb37b6acae5b006b24b5be8840ea7672864d9e78183e6de2910f963f8f861c20b43bf309e61521bb34874177d01f19782a8e1674f857b33337aedc6c7044c5ea0a65052b248c0b848a96db78600221d5599b1447efa5ec42013fecaaa2aaf3aae3586c4c47d9a40a166a9a611db3dee5ffdd9e62bce5fd916053953d60c72e96e6021034b6c65e4ed582bdbe7ba53cbd6eeda29b2edda0cb605656a4060011209e8ce0ce7a57c97bf2f670288983a299cb315bd6"}, 0xea) [ 2252.701528] Bluetooth: Unexpected continuation frame (len 4) 13:16:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="58baef1fc1c275a8cc52d2b19c608982160bc8a9e32c90f03e57", @ANYRES16=r1, @ANYRESOCT=r4], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x0, 0xc8, 0xf8, 0xa3, 0x0, 0xca0f}}}, 0xc) 13:16:15 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x10', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:15 executing program 2: syz_emit_vhci(0x0, 0x110) 13:16:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x01', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:15 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x9, 0xff, 0x1, 0x0, 0x1, 0x100a, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x40020, 0x9, 0x0, 0x6, 0x7fffffff, 0x1f, 0x6, 0x0, 0x8, 0x0, 0xd7}, r1, 0x2, r0, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) [ 2252.768830] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2252.781717] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2252.791054] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2252.791999] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 13:16:15 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) 13:16:15 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access<', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2252.842064] Bluetooth: Unexpected continuation frame (len 4) [ 2252.849012] Bluetooth: Unexpected continuation frame (len 4) 13:16:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:16:26 executing program 2: syz_emit_vhci(0x0, 0x110) 13:16:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access=', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:16:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\b', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x1) syz_emit_vhci(&(0x7f00000007c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0xc7, 0x2}, {0x2}}]}}, 0xf) 13:16:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181a02, 0x0) tee(r0, 0xffffffffffffffff, 0x400, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0xffffffff00000001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:16:26 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:16:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="c450091e3e56f87ee6efc90642a5edb77f007a84a34ae2b2b9d109e6c1b08c2ef9c055fe200c740670c3fc9f02a62ef0d2225a9e0fde9fb13d26130e1299cd8523f7c30a5c5ee6a9116e5e8e6c3b4a41303d0cd6deeaf9025eb1", @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES64=r0], 0x55) 13:16:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access/', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:26 executing program 2: syz_emit_vhci(0x0, 0x110) [ 2264.483762] Bluetooth: Unexpected continuation frame (len 10) [ 2264.489874] Bluetooth: Unexpected continuation frame (len 10) [ 2264.502479] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2264.502521] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2264.504422] Bluetooth: hci2: Dropping invalid advertising data [ 2264.534715] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2264.534758] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2264.537362] Bluetooth: hci2: Dropping invalid advertising data 13:16:26 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c91004000000caaa"], 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000000), 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/230, 0xe6}, {&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/244, 0xf4}], 0x4, &(0x7f0000000400)}, 0x6}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/59, 0x3b}], 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x474}, {{&(0x7f0000000680)=@tipc=@name, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000740)}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000a80)=""/131, 0x83}], 0x7, &(0x7f0000000bc0)=""/163, 0xa3}, 0x5}, {{&(0x7f0000000c80)=@ax25={{0x3, @null}, [@null, @netrom, @rose, @remote, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/94, 0x5e}, {&(0x7f0000000d80)=""/186, 0xba}], 0x2, &(0x7f0000000e80)=""/136, 0x88}, 0x7}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f40)=""/223, 0xdf}, {&(0x7f0000001040)=""/153, 0x99}, {&(0x7f0000001100)=""/2, 0x2}, {&(0x7f0000001140)=""/103, 0x67}, {&(0x7f00000011c0)=""/95, 0x5f}], 0x5, &(0x7f00000012c0)=""/106, 0x6a}, 0xc999}, {{&(0x7f0000001340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/167, 0xa7}], 0x1, &(0x7f00000014c0)=""/36, 0x24}, 0x2}], 0x6, 0x40010100, &(0x7f0000001680)={0x77359400}) dup2(r0, r2) 13:16:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xdf', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:16:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_accessq', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:16:26 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:16:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 2264.628872] Bluetooth: Unexpected continuation frame (len 4) [ 2264.631955] Bluetooth: Unexpected continuation frame (len 4) [ 2264.654153] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2264.654192] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2264.657909] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2264.657945] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:16:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:27 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa"], 0x110) 13:16:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000800", @ANYRES16=r1, @ANYBLOB="010000000000000000000a0000000400018004000180"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9eba9e58", @ANYRES16=r9, @ANYBLOB="010000000000000000000a0000000400018004000180"], 0x1c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r11, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000001700)=ANY=[@ANYRESOCT=r4, @ANYRES64=r4, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYBLOB="108f89b8080d47435e4d6278b215e705747967a113d657c5bf26fbcc3c7612b57707da893d6619be0c3be63e69c7dc17c40eaa78d5e233b6dcd59270d1238cae7f700f5e838e8a54804e0b19665096f89ce33bf86e57cdba2daa3798e8fa44ce74d3a972770ba3f851b7393f43b5a55aa8ee6c117ad075aac4eac74751506e34eaaa7fc37fbbf687a88660a7bddac0ebbff72b16d6ace207d9bc2b3f1345ad29289f71a8cd0b1adc65268900029cada87af1f8b9e696091871e0f24ff9dc61f88fad145004e340", @ANYRESHEX=r3, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="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", @ANYRES16=r12, @ANYRESOCT=r9, @ANYRES16, @ANYRESHEX=r10], 0x9) 13:16:27 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:16:27 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access0', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2264.739957] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2264.740004] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 13:16:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:38 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c910ae044547413000"], 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x5, 0x3f, 0x1, 0x0, 0x8, 0x404, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x3ff}, 0x800, 0x3, 0xf173, 0x3, 0xab4, 0x5, 0x365, 0x0, 0x200, 0x0, 0x1}, r3, 0xb, 0xffffffffffffffff, 0x0) 13:16:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x405}}}, 0x7) 13:16:38 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:16:38 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_accessz', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:16:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:38 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa"], 0x110) 13:16:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) 13:16:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 2276.152507] Bluetooth: Unexpected continuation frame (len 4) [ 2276.175066] Bluetooth: Unexpected continuation frame (len 4) [ 2276.182881] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2276.182903] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2276.188935] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2276.193858] Bluetooth: hci5: unexpected event for opcode 0x0405 [ 2276.195410] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 2276.197095] Bluetooth: hci5: unexpected event for opcode 0x0405 [ 2276.206805] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2276.206836] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2280.222235] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2280.222978] Bluetooth: hci5: Injecting HCI hardware error event [ 2280.223586] Bluetooth: hci5: hardware error 0x00 [ 2282.270146] Bluetooth: hci5: Opcode 0x c03 failed: -110 13:16:50 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xb6', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:16:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x02', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:50 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/fib_trie\x00') pread64(r0, &(0x7f00000020c0)=""/4096, 0x1000, 0x80000001) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001080), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x140, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xcb, 0xa8, @random="7da03132e0426cf7bbf1f254f84d1203b907b7f144408e79b0b476a0e9cf9cf3bb6af1e9a30172f1c55c8a8a2827c663ab3d44994b881ddba4bfbf32ccaafececf26dfe9ae9b93ae5b4cab19884aa7bc8ff0503be1cb5c32cb5f5b7c826999e442a1674873a4a390c4cec14c2de496cb187857261da1b8e725178f6b7c6d33df5ab009497260999ae958c723940ca7e5231ebcbf950560d466f74a3b17da0f9fa611394d5cd9abb97d596a7b2c4dc3c7cac72206839329b78562fcf6aaae10a20e37045b88430c"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 13:16:50 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910040000000100912d1f00c4656e47d2b6be042570307c921ac1d6635398537c2d671373941b9c306e24a593d3921cfe96301eb792052b41514d72ab90b4eb2253276c2d70f5663d1c84e33e21b2d02c2e2cfe17cb82281ba1d20134bc40"], 0x9) 13:16:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) 13:16:50 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300aaaaaaaa"], 0x110) 13:16:50 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x13', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:50 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x2, 0xc9, 0x20}}}, 0x7) [ 2287.640006] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.640053] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2287.644442] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.644477] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:16:50 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d300fcffffffffffff0101"], 0x110) [ 2287.664785] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.664825] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2287.666551] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2287.666812] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.667581] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:16:50 executing program 4: r0 = fork() r1 = getpid() setpgid(r0, r1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa3f7476a28b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xe1, 0x2}, {0x6}}}}, 0xf) [ 2287.670660] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2287.701071] Bluetooth: Unexpected continuation frame (len 4) [ 2287.723730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10829 comm=syz-executor.5 13:16:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x110) [ 2287.730330] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2287.730370] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 13:16:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2287.749786] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.749834] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2287.750980] Bluetooth: hci2: Dropping invalid advertising data [ 2287.760930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10829 comm=syz-executor.5 13:16:50 executing program 6: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000080)="bfd196c5a60a296a9b", 0x9, 0x1}, {&(0x7f00000000c0)="b2d066a7e8de206d0601877198af333fddfed456be42af3725a8b94d86eeba1b891eddfb493323602310df98d474", 0x2e, 0x2}], 0x8004, &(0x7f0000000140)={[{@unhide}, {@map_acorn}, {@dmode={'dmode', 0x3d, 0x8000}}], [{@smackfsroot={'smackfsroot', 0x3d, '^&+}'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '(}-\'}'}}, {@uid_eq}]}) linkat(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x18b4a348f0c8bf66) [ 2287.776231] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.776255] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2287.777801] Bluetooth: hci2: Dropping invalid advertising data 13:16:50 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x110) 13:16:50 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:16:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1b8, r4, 0x205, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x534913745b8125a3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x1b8}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="d6e750b5309f848f10b857f8e4709a0a133fc145bd7e3b5ff81b9cbcb69929b5dbd0c4789d80fb6200948c1e0f70b319d81f777673cf256f19d5332ea188b8dfae56864d5037e2b958816f29f9b789113d1ef3e53ef716c0127a73259aa20170ee25e03090b01bd4fb7d440e9c1698fb4e42a697ddb552607c2fdddbb5007106ce0e28d3e2f045674395b3e9b7a86557fc062551ed", @ANYRESHEX=r0], 0x110) 13:16:50 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:16:50 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf0', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:16:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xff', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:16:50 executing program 5: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1fb}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x4004000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x9) 13:16:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x110) 13:16:50 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5, 0x2, 0xc2ff, 0x6472}}, @l2cap_create_chan_rsp={{0xd, 0x1f, 0x8}, {0x0, 0x0, 0x8000, 0x4}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x8, 0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x1}}]}}, 0x31) [ 2287.929878] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2287.962931] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.962958] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2287.965287] Bluetooth: Unexpected continuation frame (len 44) [ 2287.967431] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2287.967450] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2287.968339] Bluetooth: hci2: Dropping invalid advertising data [ 2287.970648] Bluetooth: Unexpected continuation frame (len 44) [ 2287.993069] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2289.693726] Bluetooth: hci2: command 0x0406 tx timeout 13:17:03 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf3', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:17:03 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x71, 0x0, 0x0, 0x3, 0x20100, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8397, 0x4}, 0x3, 0x1, 0x4, 0x0, 0x8000, 0x20, 0x3, 0x0, 0x31, 0x0, 0x9}, r0, 0xc, 0xffffffffffffffff, 0x8) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x4}}, 0x9) 13:17:03 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb4}, "8a8826e2e79fbcf722605b8adf3f52512595ba55eeba87d11a47820ec93227764b928b3fb5709b25aa2ed56af57a54022d84cb4751cf4cc1c49226618f8aed207f33fed35ff5c72fa6b06248d84673e75f5ce79604364d9d268edc7fd8b4dccf724b04cfb4b27e2f88d3b95f47cc3b899cfd690b0ebd39b95b1c9a1419cea1218e733c77d4720ae6cc3857c7602acb14543e8589e2c80bf93a5178f5d6cbf1487947bc8b1308218a35e81e2d38f3b2eed89a9b41"}}, 0xb7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x7f, 0xc9, 0x5}}}, 0x7) 13:17:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x110) 13:17:03 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) 13:17:03 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc9}}}, 0x6) 13:17:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:03 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2300.849014] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2300.861464] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2300.863483] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2300.863516] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2300.870653] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2300.870690] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:17:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6f86bbb26af0d6674e22b0b5827486603110937c6b69911326700e2a916c4ecd7efbea092725e724bf8c1a40998d44eb58bfd88fa260e9ba00f44dfc868c08ceab5c17bc9370b3b43897cafc0c3f4391cb180cacc11d3393a54a92afcd0e6eb9fcd05768d0cd9f03636b7ff97533c99359ed2a12294eb7400c87fb5493bc4d00767bf7cf0b01007520f09389b902faa47d5f262aac63a22fa98ce8a49e0fab4689aee6b3ab311396fe4222c6819ec4a455c6917181c7f3a31f5067d2dd1f4137cd6fccf0bab51de2868a7bdf39404279042260a480b1a32134b30c0a15605127c00a622b70932460fa337c041abde864cee5c291725a0425"}}}, 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0xffff, @empty, 0x100}, 0x1c) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9102c0028000100050724000100010001800501010102080001020002050101010252a28f4dc2b75e9d148301020101"], 0x31) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1c}, "ba50803c631d7e20c4d5f78f3b67d2190e9839bb5592b96b03163d65"}, 0x20) 13:17:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x110) [ 2301.024720] Bluetooth: Unexpected continuation frame (len 44) [ 2301.040146] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2301.041078] Bluetooth: Unexpected continuation frame (len 44) 13:17:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:17:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:15 executing program 4: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 13:17:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2312.949173] Bluetooth: hci1: Received unexpected HCI Event 0x00 13:17:15 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf6', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:17:15 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x01', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendfile(r0, r2, &(0x7f0000000040)=0xfff, 0x1200) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000180)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fchmod(r6, 0x10) gettid() ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r4, 0x135, 0x80000}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x0, 0xc9}}}, 0x7) 13:17:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x132}, @l2cap_cid_signaling={{0x12e}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x1, 0x100}}, @l2cap_move_chan_cfm={{0x10, 0x20, 0x4}, {0x5, 0x8b}}, @l2cap_cmd_rej_unk={{0x1, 0x1c, 0x2}, {0x200}}, @l2cap_disconn_req={{0x6, 0xa9, 0x4}, {0x2, 0x2}}, @l2cap_info_req={{0xa, 0x81, 0x2}, {0x1f}}, @l2cap_disconn_req={{0x6, 0xb3, 0x4}, {0xc9, 0x3}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0x6, 0x100}}, @l2cap_info_rsp={{0xb, 0x6, 0xf6}, {0x6, 0x5, "010f2968ff528117767450b332ed136c58b7dda3cfdf81854515cf4fc97d5fefe6d1364b43ca8b9082472b2615a8ac2ddd862b306da2f00a0fc9a4ce3171dc0bc128373504259a6346fa12ff8cd25d1cc907586f09d14463dae4f522101a5b8b1a5087d0ecdc8e5bbad59cf424aefbd4b2bdc7bfd8aa435a26090d0778ea9c9789770eb5efc08fece706554345474db5fd58c457e656d2dfe8e544b8bdd3ae0c01484168c57c5c927ceadc2dec41a9a20d0e45e7330da61674862b06184a4e189bf7809c4cb1f798096c39a3ba1df85c17eb3fbac60f3da9efa879a2cdcc5575ba898f0274ebd6f1f45ad57f9c018f00dba1"}}]}}, 0x137) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa5}, "d4d8187a22a8ebcd4fb34480b82d5c48f5f9c79e4fd60f4f57d2287e023136dd9625b547f5e07ac16c97c39a76968f90270898e2371127c1652b510ec59de5808ac38d91c4a3c0063a3b5aebc6cf60adfdf207f4a61d5992f10019921d895bddaeb5b29ba8266f7854779d1878900c50ac1278fb7db5cd4fa784391dbbda3c02cde701a8dcc66a681d13adf9d4d4c1b5286fa727fb5cf25478134c63721bc16baf29687ddc"}, 0xa9) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "7c503afd97361c88bb979ed6550749ae", 0x2}}}, 0x1a) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x89}, @l2cap_cid_signaling={{0x85}, [@l2cap_info_req={{0xa, 0x4, 0x2}, {0x2}}, @l2cap_conf_req={{0x4, 0x6, 0x2a}, {0x7, 0x8, [@l2cap_conf_flushto={0x2, 0x2, 0x1000}, @l2cap_conf_ews={0x7, 0x2, 0x34b}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x1, 0x400, 0xfc55, 0x5}}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x4, 0x8, 0x4, 0x1, 0x101}}, @l2cap_conf_flushto={0x2, 0x2, 0x1000}]}}, @l2cap_conn_rsp={{0x3, 0xfb, 0x8}, {0x8001, 0x1, 0x5, 0x7}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x0, 0x1}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x9, 0x7}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x7ff, 0x3}}, @l2cap_conf_req={{0x4, 0x3f, 0x1e}, {0x401, 0x1ff, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0xe, 0x59, 0x3, 0x9, 0x1}}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x1, 0x7, 0x62b9, 0x4}}]}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x8, 0x8000, 0x1ff, 0x8}}]}}, 0x8e) syz_emit_vhci(&(0x7f0000001580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "8956bc4f7d4495242dbe73f7ed0d8bc8ca7f84055bb4e4e12dbe4d14ef78dbb8cfd32dabc15f6ebea10cc8e863db6d5908ed5b2700fdd7142183b6de42c686d781670292b42d439228c4ed9ce111f9763a77a0da6d4fbe25e93d6ea0445a9ec4608b7d05b44aac5a48dd6cccac64434bb474324215be0540c04a2dcbefdf0c00257a56bfd2efea00e0dc3fbe09ef60fc7b0ca2181cada7283bbcf5c8559d196f67198b74a8c8695371ff4f9224a0d03ca6ca73a74e9caab1bed6ec30c339f8bad8d8a70c0b77ff01e750c2bffc0ad6d369dd63a442b0ae2c45c0c1f38eb166ee50f79cb9427b2dd69aeec14983a5c3af1cbf04ec5c171f113f52c271087bb0e1143618f1298cec3281a0e2f1edcc684c75d60bbaa7419b7b7bff9e5cdd32c5489b788b854d9c1ca95e8a51c9fecba6c7fa79763bba0747a2cc47233c6e8fe185a45705f71f819a24c6181cc04a7c6a40f579c41a7ef3e70aa2656edc445bb4c7428fed5a63fd523211c02f62fb19d93bc5f08c59a6a2da7a0b006e416f04dca9cf19b9e5cee50a805388c67e06ec77431dad36ed5da945f24a8e15d46935a6b1b871f526cb3d3c848f3e75a86bb6f93e8d00cc1f8141c923c414470758df3330421ac4f5995da404c941b858672b34b31d969b6c8e0c055b2a2fe6616dc798cf0a294233a79b0bea9bc80090bd349b1f8adfce2ed75223a194aacb36f3aba2e2f4e6887566a03405f3604b579b90e2ac7d5f1858bb274ea391fba2d9c73463e8924f1163f8cab517da95a95b9fba6861583a6a7fe3375a7d10ed385a9989396af73517c69bf29d5609164691e5d8b97b050c09832e6242ab1acfff94e550a9f396b1c8415e141814c9155d5ce9d0247e46c695480e47df7ff15fd41edbd6d2a90ef39b4eb915617c86d3e8d11cdc5ee5972a40bae3a6f92b040a6609458cc3f9ab1f40ea1aa13c6db6372bf6e563ace029584b6375896325c1fddfb9030a7a5aca0b05816a2e9b120030e1f46c9c2be7a5745ddab39e9e644ff70da738732b5a2d73556e5c780ce6376aedef51cec313dbad425fe04ec446a79191562ed7a30238165376f741a694a0e43df0d7c3e748ac688ed7121051f3dce0900e91944bbb84246b23cfbb2936f353bb9fe49e08cdc6f5f35413a7f7fbd79c88370d05a8b958f5f4acfb100df56bd236bb005d38552afc2273ddbb03dda8cc874e0c96bacdb11dfd32101b94c44cfdc1ec604d9c1ecaa26c7083fa8f941467713a8eaf18bff6d24ce3e52bf13d0a4328d3ea819ecc22842e555600b72ec3a9105661fe62023c9c215f3b7dcbbf4320cab185afccb9736f3abfde02abded325136f52992aee7016b3ae60c8bc74e5f160dad2dc45404a5764ab2345a8a7126e7150f94846fa005f5a2cbfbe1ff2ec16751493afb648076361b218a16b57744d3e5725f8807c84d1d30d9c1dd354851c39fc0c271631030536d5b7c0646aa9e8ec95d00af42a63715d2734b6151a349439f839c54769511f91fa30d4165365d9b528677c6d12f608299bef1f9193c4d82c466ca82533982624ccff1eb2a29f37092966a23f2d3cb272881312c0f73ef42423dfef42382cca76b9595ebe26bfefd78821c4352f6edb06653b39116a29bec211f5f61071fa61522f1a3fa8022a429ec15d23ec9602394bc948f457c1450a3af62f1a79680f462050c27e29e68f43b4af022fa3636b3cb199d3f71774f33081fd40761770b5055fc2f63f47add3ba0f3cb1a4855333e6a51ec185c12e7bfa408e2c572edd2541193dd3b9e923fc531fbaa057a96268484e7c54540f228e9f4324bad1d8a9d4d0354896ff42945265d53d078782e13c0886a00353d2649b8adc5832fbf29a9ec14b11c6d31b6412423b716b651f74dda68eed733dba4ebe53c906f72a9049bf39680aeab4663824552e5a1e0fab5d49eb9d1b0da6b35387dc27e0ed4eebeb95ca8a849964059dd8cf02b5b72aaac65c98ee45748295b1797a8fbb262991fb246230190c3234e906b2f5cf169eaf6966ef0d4d40283414d460fd9e1e9679179224ac29844cd1ff8dcd58478ce9e72b860d79306b574276e3502f15fc9f4d6d05d7ac3493638b2cdc656b10ac58360e4201e844eee87d52f0fc8efabe4f71a7d8613cfb1f78b385d88c50a18c8e5a6b7946a154bb9e782d44c604a46a6d101cd1a3082d7eff32e347a20f96bee4c049c0887f961152742885b23fa7194cc8cc38a1b4aae5acfbe4d30ddbd5a178f5f2f9f8ed0acfe6c5087a8856ce2122ae27d83e59a78fde942f9bfdaaeffe77a6151a92470427bd08ec545e523b823540ae637fc055db71115c3b7372f8ebe1784f5df2f2be3bae7f3a3111c73c7bfe93fce6ee931e1a8ad6fa8b2ea3f637943c88044efe1f399ec5f9c132f962783bd1488f8abb0d6cf2cbd44bde8a64415ec3b5ca05adc03b454310f3b1f03736ce2113f6fcc6d28f297d0266bad951d932cebc490b3ce76ea5cdb5ea9e766007bdc9316f9430038496eaa7948fbeec1eaae573e1232b85f0763af98f138280bb06f66ab1999763d2e5840871f97507d40dd07b58823cdc2496742614c9a04f0cd655754f204a75d6590048e395eff14c9fa0fbb3ddbf752fa6db76de139b072ccf551a341336c0c3b909c15b9a42f725ca84177027baaefb9f0022cfdf2165c0d7217be54fdbde0469525a51299b59c304167db7e91fc4a8aed6ace717cca4f3dd7c1710a804b9925713927c6d8232a29b7370a374dc065bd5d8944d54359a21c7ddfbc16d58e9d4a0d6e94ef08d177124991a332da5c9b4204552b173be77b22d4a58805489462540e21bdff667a762e1947eace4413a5524dbf67cf676007a6b2ef31e7925481aa28ed467e06e8cfeb72630207de2702cb9abbf08922ddd8298c278978e4dafd1c275c7c6e75b0e69a2317c772aca02ba155c6859a10e72a6217ad55305b7d03fb0c2508b7fda4ca843e498763864385e53abf1447290ad40bd47795df0d9deeee32cb4022fb42896873acf61d567f25e3ce64e88603fad6436e756ba785438ae2e8348c5df75df4a8021e20364e5ec317992d80d91d1b5a58bd14e1e6b940570a392aabac2ec6d1de9d07510fdb3d39f575f8e1ad33ba35550c34caefc1b6be5ef057392f8443412c8ddf78e08727fa7dc8c2b47a02b0f4cb2d3fd9af482813bc57c81c6236baa592b7ca74b7313c5f5a47a132da632e3a6f5dd7a6c3f025bc52c1e662520edad94b6f333411c995fe6df9c50066142e7c8cfffb6badc8b4f63f88df69d93f66e3b454e8c7d454e88f514d26979b61e91dc8bb627783dfd592b3817c22233f2e8a474ddc4e18fed25760d65acef01dfe1097174542ca73ce8cf49fb3f80035eae582630289d8875ca5428dcbbc784af6f2e8df1ec69f9393ad7e3455847fd6713ba34b23fd9f75578ce22549711652f81b69ff670024edabb4631c1766dfc821d544587842cdde1c4ac4c1a71bd56ca193d7304058846be768ca919bb285cca616eda67337369aa170be512d452b35e040b3443c2476ae676e9f937de55e3f9ef14632f8ae7bab92a2f1172649892c85e88d5428d504f2ca51c0836f681afd9d47e1a6680ef49465e319dc16cbb5abb0e7572b2b4a099056dffbdc9ea409379b30b62ea33e360a53f6fa94b3e6a5c0aa99b859ecee0078c73c8d730b15fe15e8073710a620cba78527d062f94b999336d53d268fc3d07d807c805e1cd8c5e8edd9830a195d20f1868a17a0803d1aee0e0471a9ec8b7ea38468ccaf0a3a2229319126009681634fbf450334b9ef9566f0d34350a054591c794299173df16ebb1d7c49a386ca96787380ff12306e8feaac3da9cbfe47406bbd0a8d8001ca1717e60a1784266daf0381db373f7a11b67092e98553022acc8a158458e2dd7b4c893a9852d1747262d5717ef7cd1447026989f7ae5b14ef67bbf2acec2bb2c2685ffe548594b528b0323ccfc7c9750cabd532e254266157d0bb52b4e36115365ff8eced6536a40bd1219ac4a8ce8118b6ca3c666de60842865e1e105ec2a1162d50764d5182de942f3cc811842eb5d5792c4057650ec77a20f163d7f9c6d54b5a647c8234606a919d766bfe76455e82ece4556ad98e65c715d5e7b612f71a696c81c1b2595a71c0d05722d5b5e336a59c1b470a5c98882a6138d272c68f66ed2eb3f148212f9ec9432b63da28e3d63e0f6cdbb4839ef6513e54f56820a31a30946ad02e90bc55c6cead010f98494c7a151e1aded9364ac5f142b1000f8cb3f9e837ac4624a950a190141707b99263f3ce34a49497b9e199601e99d49b1f23f40f344ece4016ade2bd8406c76e8337982f09f3d584c5ed499497aaf751537bfad941ec1088d76da7e2822c011600a6407c3049a031a15b1aaa48902a6816a3ef4845bb7299669473ee29011f37750c3a32a348f3a17a57d396f98e98a4f396c0d3067431fddd1dbc0e86d47da400928af70b4bc3bd6fba6431f44667cb14f957ca78251b997cbc9bc179dce24ac6ddb02a172b8a1c36387239a793a058b10934cb84227e1af2b943d1e660b2d5bfcaf07065893e7ea0f36f36c3a7f42845cc9c16ed466eceacec1742b4ef1d18a0e0352e927f41d88d47c46a4305cdaea2837ea346bf40df7fc7ae05a087b444c97c4950e91aff96d4fda9be0966a01ef783d2beeba0ee481e847801d3af88e6cb7da3eebb61f89a3e6dee4e7a9e8457705d5eb015141b59bb239c4d2662d236db65326b7c2b71639af23a22081674f3f38be2c9a6d89c71a623cde02bc797e78c5da658c23d59ddbe460c3fe0c5fd3aea47648a3107ce8866a30805c3b956621a00329615f8d8685f34ee77513bb7dec946e283d3f8b10a517b9b95ccb8ef265c2da021f6de92f191bf42f9ef9a2ba4fbdd0b1090647d0ceada67bf01b917df0e9672611bdb978cd26cea3535ce5a79bb0b1564ece7cd9ed93280e5a2b22e4986c8a9807c581fed246401fd3a7af214230a5cb6e054c89c4a4e281b8d28bba0e5481f89fa510bd967aa28e6e8135e43bbb69b0d52313c1f259e30d521d39f83f525933f8aa0348d3e6fb2dd074bc02bf10c021ebeea02a4e0052c8b4f8a26dd93ea626cdae3fd41948114df0e26726eeac55d7a17b2501ab44c825e391fc01757e75a176e4b6056534f83ec79f052a70b806cea97908d707b91039036a834707282667e8e168c9475a047afb0cb1ab9ee14d984822681afc5f71770935251c87509b322cd842a52556c25d435f72105da3b65f5dd7977f996159d6c0b0ec190a1261fae599415e764be71514d9a6e0b75df7988e55dc9749a9e6b7109a3626b1c45f220a0b0a52d593d74752c1a8d3332ee9321a587f18ca9c0358bca1cc5b8f1e33473d27a610ed4cc87cfaf3d717caa2a13a3bc686bfe92ab7c1f579af91e0ebc36f08680afdd0294d5048d260be540914c8075e96ed16955a277cc2454710c262a948df0b29feca46f7f911d38c951029db91c1bc36d094286c566c27b4beb34264685074925086dfa8bc4e93ec7ab2aa635c85c837edadb51678bf2d72e24bf6f184c802acbee69ef8e2ebaffa4ddc1328b92996047c801fd6e128301e61f108055bff39a1c91f0192f871856454467d369fb6a05c076235c41abcdeead53809438333757264fa2458e31f839abd815b050a6282c7c9a6cc4450a93fc880bb8758f81bdb628a98905bcacc1723ba1fec9d61951baf698f4d3413e1b30d950e3009a003889933becca2515e5c1b195fcf3d4d84f874be93c7"}, 0x1004) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x29}, {0xa, [{0xc8, 0xffff}, {0xc9, 0xab}, {0xc8, 0x400}, {0xc9}, {0xc8}, {0xc9, 0x1}, {0xc9, 0x2}, {0xc9, 0x4}, {0xc9, 0xfffe}, {0xc9, 0x4}]}}}, 0x2c) syz_emit_vhci(&(0x7f00000014c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb7}, "cd0a1dda214a429241123e8442f791f937a77c6ab6f82adfa11b8e885d693457b42ecf2ce38878b68ed1ae9568d0cee04cffca85cbe2e11609c880a17e52b0732396ed8c506270286317887b1266ec349432c6f546d23ed3e6a30e5fcd9c1de9db868a34c2ec82a26ce1df25f351ac11af52f185588839f402e0d7f8fdb04c8dcd10b9484f1fcab7c8a9808000e4e59145e523f572fae2c9e8f31a55bc069000a0fd631fe74fa3dc06b2bd8b0b7c2c753427c266678bc3"}, 0xbb) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa3}, "605b251d98b3930d9800b970a348b8c6ba92600574f982f10f075a1882e16b3768faba63bdc3c581018e5b2847959fadca8ef836c065d003595b3b6f8240cecaa5e9b99c8ed6921d10a773be10dd74a927fd1e45cac87179441ce5e220f9952a8867fb9b4be240c9fdc2b65e7902f7d647968046da3a573e22737b5e19a9bc43dd369c109ef1f35de9bd60668ead09cf8a6dc4303a9e4f6038950f674afe6da8692999"}, 0xa7) 13:17:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300"], 0x110) 13:17:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x4, 0x1, [{0xc9, 0x0, 0x1}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe}, "a1b54b1e48d7188b69408a68243e"}, 0x12) [ 2312.998571] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2313.012373] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2313.013308] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2313.023097] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2313.023137] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2313.032870] Bluetooth: Unexpected continuation frame (len 4) 13:17:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) [ 2313.061761] Bluetooth: Unexpected continuation frame (len 4) 13:17:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d0300"], 0x110) 13:17:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x3ff, 0x1}}}}, 0x11) 13:17:15 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x9) 13:17:15 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf7', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:17:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:15 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x01', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:17:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc9}}}, 0x6) [ 2313.109060] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2313.168873] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2313.169902] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2313.172064] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2313.172098] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2313.183714] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2313.183754] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 13:17:15 executing program 5: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0), 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat(r1, &(0x7f0000000140)='./file1\x00', 0x189000, 0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x9040, &(0x7f0000000480)={'trans=unix,', {[{@aname={'aname', 0x3d, '/dev/null\x00'}}, {@debug}, {@msize={'msize', 0x3d, 0x3}}, {@privport}, {@cache_mmap}, {@cache_mmap}, {@cache_none}], [{@uid_gt={'uid>', 0xee01}}]}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [{0x2, 0x1, r4}, {0x2, 0x1, 0xee00}, {0x2, 0x1, r5}, {0x2, 0x5, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x3}], {}, {0x20, 0x3}}, 0x4c, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r7], 0x9) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 13:17:15 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2313.201654] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2313.259516] Bluetooth: hci7: unexpected event 0x3e length: 269 > 260 [ 2313.260482] Bluetooth: hci7: unexpected subevent 0x02 length: 268 > 260 [ 2313.298730] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2319.325711] Bluetooth: hci7: command 0x0406 tx timeout 13:17:26 executing program 5: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="65110feeb89b4d6a5a96b6174650873c8b7a3fdc474de735cc674f87a34aca02bf550fe2046c0ed132b485478dd7e8f19a2b2b5fd38e5b6e837604ee13d3b70209d0a432f5584189eed49784ea973413596da17d48c764dc8085"], 0x9) 13:17:26 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043a8e020ad93f8b7bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xf2}, "813df38656c04608cb488c5991b4183fac893f757710daf4d8ab12206fbfc97184fd7e4b35e31020b1f1160ca242f8d41d3916d86f89e71386b8bce17d4b563b86ae04620ae33eadee329c63b4e20e322d5272e24f32db43bfbefca85a009450633ce97e97c4fdc4854f7b41302a1ba2691f0a86a4632d1174db4fe75d77f61f5c1bc1f4fa151eeed604e4785d77f4fcf44175b0a550c00345eda98a2bacc01f21ed5af611274392be6eb8a95430e57f4447e60a57eac6d13da13730314d14d9999922762b728affa9d7c646bdf492c31ddb9b14899d9e2778e2bd9b9902030a2a68b778675c76b35dad83145adbea815f3f"}}, 0xf5) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xe3}, @l2cap_cid_signaling={{0xdf}, [@l2cap_move_chan_rsp={{0xf, 0x1f, 0x4}, {0x0, 0x7}}, @l2cap_info_rsp={{0xb, 0x2, 0xd3}, {0x1, 0x8, "0e4122d15072463e83bc709fd8d25bd77186f07270c7ee14849f9c301138062138b3e85a32c5a4c095c652fcde680c53288875cddc18578925df53dcb0a4dd0073214c6f19f23c936992683627f57aa8f81762ee5056a11b026057c093cd4022337ff6bbcbedc6bc5b7f39831c7d229731f0c1dfcd0f6e3d2062359eddcd20e54b188660ec0593b17d0592a350566838aef2d20d8a5cc3c02a7821f54700c914fe85740eb86d7231ec92dc78f02b0c9008b6c4873b95b04d5ca029dd74d8e8f799042eb7f2f866a1273edf6fcfb681"}}]}}, 0xe8) 13:17:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_accessO', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:17:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:26 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1fb}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x4004000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x9) 13:17:26 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc9}}}, 0x6) 13:17:26 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2324.028776] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2324.038074] Bluetooth: hci7: unexpected event 0x3e length: 269 > 260 [ 2324.038117] Bluetooth: hci7: unexpected subevent 0x02 length: 268 > 260 13:17:26 executing program 5: syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7e}, "b0fba02f68dae737f58869eb03278d30d911fc554d0b0ff8112463e28854ce9f9721990b5bc5c6995a6172a9c0d8d42a4d28c125e6f9d11fde28c9982556e01554ddf0036ee049f7b24ba6ab77173312d6b9be4095381c8d4a99b2528a52e260b4c566abbe741fc9993b85b2604397ca10dd3b91dfac143cc1af61944fb5"}, 0x82) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c900e0e8ba35b94118b2ba1c29a31be0bf8e81956177123f6ce37384d5f4d9e7b09f6c4b06f88af2e6c78bf1253c7d3b70f28d36a48c5fd7a052abc24e1995160150734c645b018ba8f87f3d3cfe5d24281644a290d228d61f891df6c22ce7a17d21e84585b4ebbb4032e2a6f4a5dd3c4628a268e252a46cef4c8d3633bd7e0ebacbd47543211df7d64be6961a79724392e4eb5731ccb7d8b2bcc8a0b11725675f509ffd4b8f5dc84291547f6b9d54cfc98a1e5a11e9995d4d4de073e54fb0b7e3470be68193fe8bbe0fc7fea4c27048dbcb8f3edda01a42d1f9a7f5f54dbf1cfdc0394d8701d631376fd38a4de21afa537168b5f4437f31a04f5ffc8ef9bfbdcf056aff1ae929c5415d36b8fd8dc867ceb70852243a0e764f96494526bbcb9fb79310cf8e0b5b223cb13c42ec08b6b91148188d6424c9b1ae0bddfca3634cf66af04f7ac6c8c8834a259fe4db724d4b74e0b09da81801092b3a7c77b6c11d045dd7f08e3df290ef"], 0xe4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x39}, "c24cf9deea20341cd16561bc948fd7331eccf31a3f3a5a0eb2bf4e82bc8af36ec17e6d4c364425783776c4e030ab060198bf3f90bc52d33dcd"}, 0x3d) 13:17:38 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="6ffb1f03"], 0x9) 13:17:38 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:17:38 executing program 4: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) 13:17:38 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1fb}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x4004000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x9) 13:17:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:38 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x110) [ 2335.631092] Bluetooth: hci1: Received unexpected HCI Event 0x00 13:17:38 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0x1000}, "4b8f87c196a33b7cff55c0bc5f9a9050f5e51576ad0b02bdc51630b972931bd3075c40c7b3ccfe224ed874239693715f324661573651cf8cdd0b8822c27277361c1716b680fced0c7c3cd26e4bf649f2f92f706f3c749544994ddd7658a13bb534734802d374121f8a59e0d0655dcf331937ef4dd38abb5b1f490f21e27bc3b5af5f2ceca78216b6da1768c6cfda8267276dc7cdb61134806633375b1b14d3dac404a190e9ac88a87184fe7671c2206a19cae2dfcf871af34b2accfe1763673bb0e4c829111e257eb954c8ede54a0c17fd301885a70918df473b3bee0ff1e747346e3aade12279ec6e618518feee0d4ba0b463f8a1b05dc0d4f167e3e27a56e5b470823b586c9f7867491f4020973b46a26b6db08a2ec9915c15a99eac6309719aed98601d58821af1d7ede978b22854f094a6d97a05575104af8c39894151e57efcdf9cdde9b11223a81b655d5451244b58d8c518154ba361ed947475a905687c7eb83ff4bec9b8e71c1ae4325408454a3ad8fb6bdec19a20608b184039e81c16333242bf3c40af9f9f7baf70427751ae6f1cfbf21281309f03dca92305937ff5f0d59684be6359bb75aa86f26459fa968fa45924fa7c17b4cda73a27ae050c73d083f428e8147f1715db7a0af4600a9ffdda321a6199eb4682d81312842fe88a4b7b8c6557a6c1f8494566298c689d0851729785d2b1b7defe51b439dd49c76580e029a24c20bcfd952b2a30dc594105e88d53a0b92933083f7d3d0d14b17b81fd79206fd9b0861c50836b1c1ab040b5c065cfd7e139b3c5f8d886a8b743e4a6c3d274afe60ba921c7f8fb35a92f290c58e1a27b7e7bd1e43c088ebaaa259db3d3196f6953924bf822aaf40e05fafa4e92f4654af67b8ecf18d58c774d2810a18a018bc76a011072948421abb1981b63788b68948ec81dba27c13d21e8799368c5259df8e01ffe6c727227a06df88caf6660110a1903fca698eb03272e1a8e6dde9277cd371a0671949e0c98f7e11e44621d577ee34334c82636bef5cda91069cbea82b431177302ae48a7ed94ec56555118319d99d80df430a5607bfd662da1aae25c430e7b233cdc74c277594862914760b0b0bd3f6ce7ca93428d97170a25cd129f72c537e387d12c6287192cafab9982202a88b8f8c1573f935c0361e4aeef6e47f251cea7144a10d774b502e3990abc73240ca6e09b88aada768b8ee3998e933a0e1af7e31b047c2825f5f1c7082183a49e32e4ee60a1c05657187795e7e6f211becd106d65bc024e3fa0a119a448647b911ebb05bfffce0d63fd9616184214695146a1ecc6d68c1e91730cc4ec418b3db2438380eb01e6e7d1a5d5740a67a554d0d3d2eb18c07d1d58307364c845d9fd568fd23a66fcacde458113f85276a5dc93bf93e2d343d6a7016d1e587f86c7dd953661b777df586cad8114e2472ae79df000f293829fb698c5d5f7fcbd45030757bf252ff0e3179c707c66bc32153b8898c53c5681c3459d36eea2b70800002c000bb17d655fe43ee7b701b6fa2626e778d149b14206be691fc5a16a352186f419a408aca565ff4ab4be7d686479335ec045c8a475c7b3dbb6d0cd94cb27e234f3384dff229941893dd77072c48242f27d4eb8013fe40cdc7107582c554cb6caf3f780d6653e42ab05828448dd77bd13629dc8dcccb8fb03b79226a36ff9e490e7cd188528ce6446c9b611bf9706b0f490448f7ca296f5f4edcba02307ffcdf04b4c62a103ee4df46b804015efcad1a06757a045cfeb1e5890de9d7670dddf3a6a5cdd4d0a9581f88f7a01871ea423bfbdb434ce29e906f8d9a50ec349a73cf2b6f3fd992c6ea2dec6df6364db4fbdd13e71c596c38ff0b093529aaa1f506cba6bdcf9057db8813a6be0fe0b83f283b55d177fb42cad07d2d3d40e57081358c48150df3ee1e7673a6686f24314187dca0295c744891a2876a4fd200eb0c42ae41bffb1b06e09094173cedbf362dec654fa2b1bd4d14ffbc9a369861c0c46a26c7b36477a587f7769e0d2eb061cc493a81bc19e94217615b76108661e5399eae120087e63657792718f4575c0320334f3aadeb13489a5f78a3cbb7e19e11aab4e277533ef1d62ed4d0c64608709fa108bbe5cb9c85e053c8c940d9ae45e544663bf225c5f449ef9825527f5b5b9854730800b49a32496b4126b9b3fedc8aae2d603413520d010d0d89eae1a192beefb0dc689de1559a98cfa0e39442ca9b44c136011ab2c93706e3532a74aed20c52cff7afebecd49535f83a88a397d914bcf18ebbfcff6938419b454e8b65582f0b048c574e461dd97802c0f5d83af89181fd48927c4b828a1b699f20aba5324ec4dc2a958563373b3a6402f1586e3f3620bc660aba98034b58ee280a51f8143332e1b3ec4e8898117e8962e823c2127a3b8ad4c246e44fa21c0ca75de71cb9886f8aa27e9adf32a195249425dda41e71537272bf7ded4cdcb2f3461ad2d429b230d299de07673d42a3f5e556590b6d4bfc404833e331f06a1b1420f1956775c1b68a80087ff29183fa1b0157cca64af9d152efe9991717189dd7ec97c5ad6f4789f731b93bdd7b6c505bda33ed12118f8df4659282be204a69df77b4e4f34f77b55b46b00567b17b2c8fe14d01ebbcaffff975c574cc862ca4ceefea9115822b40a8dcd1f8ef8df9a7df25962abfffcbfe2673cc20d10d07f76460c73c25efe46e95e454ebe874718514aeb8db4d9a390a7b89ea25dd4ecf5ee12212d200ad5771868dedf5fd52e3b8861b68efd28959bf7af6b1d03c971e8514e1c21c5513aa56dba421468f75e229765c896ed2190c26b14aad8991cfc345ac5181d503c1fae69315346ccaf23c894d39de8ca3a893e90885fe45acff24b932030416bad7a6868dfc622d354951c58124b7638a91146fd88b17eeb64a1abb131f68b3dfd68e491bf0db0cd1b1769131a3947963cf19fc7c6e84e82db3aa313112104c6da1b29849da312f089e8413332051533ae883dde15d7c8609b1910341e250986d840123080a3a5fb715f17dcb78a3d97d902048a0ece023f5e09b0721ba1747bd7eef8cca9f11bd866b95c7a848050a06b134b5a4a70f17b51f8b64e84f2367ad59ed09021b75d70a6284b79979c5aabb155a5900428add6f25a48f0dd4a6de47f1846e4bc244f7fe161f11561aba0d14f6a5a7af6e207cc919815bb8a6f82ea110edd85146c010c0cd0a3748adb9f00449f2a74c9ddfcc70165b1ab1579bd690d6eb85ace4d476edbe6dae2c2a26d6293503216b5043466ce7656e7cef0bc41d03009f124715e72157df3f4f48ed0cc2512a00bbcb7eb849ae6479d75c7678a325fffc864a65fc257067a016876b2bb9a9adf2d07dcd631f72b9983424c5b8c8fc9f0e6de9dd6f178dbbac1499af06e367556402f1935176dfa3d95a634e5148b52a178a5a18cdaf6230e6d165a729593cfce3f25d11cfddc0d5653f5d2d08597e76900c54bc66c9204c0b5625411f145d59e68ec790426d270743a7741adb3cd665f335d23b6a6b68dd73b493ff66de03ffbad207f315f4f61d73821d46dfecf9654b8c045a18f14a9ea60a718245b8ea2b59624b7cad5f802beb595b8fba9d6bbb79352a93cd2f63dee1362a376e5fea86568c5ec5111e0c33828ffe468bf9d39bded59c96d2cc4f10ebcaf65deddd1939b1e9cfd0a7a6f49d8b90d11de0decd37cd15f03849aa7637b1a3b5d91a21471f0882849012eb4a39a9a31a9e25f350302bff329b02bc71483abceb884059ed6c778975d883b92248cecb7d5d7eed61a07154ddfe7502ed60e58ceedcb21052b196860f42468149937208f1a204db1bc536ce238c2a6e61d4189590a057e0ed5c57ed78eac6185a338dedb6bdae93257051e0c91747586ea4d2cc4b4d887b5d2f16d015f6314af66fff3dcbdbacd5cd90ba59f3b579819abdb5bb87275d9121bf09f28b2c1f387caf76e52dd93fafa5e33d74d822770fd447b5652f063adfe7c4bbbbc007f2f2c3e2dcb5dcf88f6fe448d228c156b3273d2d99ad49fb5b729f7b3b4cf6095fec5daac992c3250f0ebaf18b08b9d09174a13be6394ac1223ac174846af5bcb8500580e9093f8c69f10cccbbfd570b8dc158e865c3d9f0c76af6819b7c4288f7ea11efb529c8bfa5435a8c8ebeaf6d09db98618817b88a1fd017626c4cd386382377574831f3678fd8105f37d0fc0b67b6e8e9aa09642d5bbe790ea5b49b869b9d180a183d5b4979548febba41bae7f253c40648279ccd9105f8898343841a8e170c47ff360aac964d9574a970f8e395938bdd4154d4f534e9c2a183176bb3934a670ffd02e88f70cc07b1bb6eaef1f54f7477f59c263cfd8cf98c71f5051a8fae1717ff297ffa331135eafa9df72a636bd037a770a533d6835faf2ada2be75ba944a0bfb6e429e854e7eb074fa71efa9a7b03a54b1518ede92a1453d685573021a09c8541b9055e9de64ab9befec2dc1c2ee6b70340adec548763591ab278198a04eb78540a55ea9af6d55738131545470afdbabb87b68cce8d1c664e9f4713fe79140269259958ed07e4885c751d30ae5b290afe1b1d88c6e718d1bc710ee6b1f0829cc4979a10bbeea50de85f9e331cd552c703c59b9356b0f775301a4e91249c92d1c5751baaf2a669ee5142092d7b77e1c4ee12bcbcf8ff2bfab8c33f64ef36fdd64306d9c040af096fb6939622052e7f958db340705e286faf3449751a5f730265bc59d4c0230d4b7d3b1c4c72fe42f9d44a77087590305ccb1084387569cbcf65634c4209942419f91e9f9568e656fa6c36de41cb0a03f1dd926bb6476749f1e8c32444b883dc57893bf8fc6704795601a457f3d54652a20689b6f1c5a00efb9c940bc00dd09d598c1a71759f46b79e88b25f65d88a1622125d3162f1a2e1c4807dd086b547b00825102f30cbb52a6f5d5d3a57d42a619c4f7e093d7d363f44223a8a751e8593a31628b7fec04f9a564666c56ef5173d8a2140614788450c9a8c8fb37aeefde33fb6249d241a299624aa8a5f94ebc26502a6b1e77a2c94d2b023c8459294cd48370ce6b43af64dd8e1074a605288495f54ce0b4d3f333a0f36bcf0c73c94f049e2a16a1c4bc8de55cb29f279fadab8ac809f0145aa537f36422feee70d460b04e9cdb3f429dc01371d144a68813bdc35b72164d232efcff6540d54c65f1dd2bbcf607c8450f5bbef3f8e1f0011d1a2104e5c8e56889a7e2c788f71ae8b151b214d300db42a5d95d7a67c31c7d2535d7fc833a801cd1ed3f767457cdc37bab0651d71b96c3c0d6ca6871f9586be6fdf6c13eeaa775f626c51bfa1165298e5ca652b4b4e30e5499c1cf64762d876d995e8ecbdd890d188d52b02ba50cca009ebec84b23465b69e8342b746044640396c1a498e556ba112934d988dd023a881e3a6ed5f2bdf282877cdddbe3ed5de698be619e37df59aece6d065a59ee4710e76fe6d3d1d99705c189cc64a728c6a9355f7cf12cba8bd7055713780af0e24ed81229ae1e10a6315cb60fb2042ab93f64536ff9290e36919030f1d501b1428c1eae5a56db4fb04380e4f8bd1b09546bd36326af3a9f19ea068be54ebe7e3c034eefd9d8968cac976ed6800b3067a242b4577ec5dc436298429554d19b883c166777768e6d34d6ab375de53ae23bea741ceb232afdd7fa393476e9f5a33ea4f423c36e54fd7a6de63dbb25363f90a37df486c7ba5024006855897b98a5332e64776ef75072f4e30183073a3c509c6953a101dfed1f3a757698057c335268afb97e97"}, 0x1004) 13:17:38 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1fb}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x4004000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x9) 13:17:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:38 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:17:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf0, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x8}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x16, 0x9, 0x3, 0x16, 0x1b, 0x24374bd69ae7de64, 0x6, 0xb, 0x16, 0x2, 0x3, 0x4, 0x9, 0x12, 0x1, 0x4, 0xc, 0x36, 0x12, 0x48, 0x24, 0x30, 0x6c, 0x60, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0xc, 0xb, 0x0, 0x12, 0x12, 0x6c]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x9, 0x1, 0x6, 0x16, 0x2, 0x51, 0xc, 0xc, 0x6b, 0x4, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1f, 0xff7f, 0xd0e0, 0x8000, 0x0, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x9}, {0x7, 0x3}, {0x4, 0x3}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x3}, {0x3}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x7}, {0x1}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x3}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x8}]}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x1c, r3, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044002}, 0x4004000) 13:17:38 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1fb}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x4004000) 13:17:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:38 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) [ 2335.743896] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 13:17:38 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x9) [ 2335.794740] Bluetooth: hci2: SCO packet for unknown connection handle 0 13:17:38 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:17:38 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access0', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2335.814298] Bluetooth: hci2: SCO packet for unknown connection handle 0 13:17:51 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:17:51 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:17:51 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0xc}, {0x5, 0x100, 0x0, 0x3, [0x6, 0x7]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe1}, "22acb3679877249bfadac2e98ddc9062d3aa9d9dbb87482cc7a0d9e12bf243e656f8286fcae5a45cbe1628a8373a650415c804441d512842f52f085ac79592cad9c6d0f03fb42258643b73f232d08fc6d141fa7b910a14171559f2d8fb84e2fa4c400076768bbe4eadaf3fd52e9d10ce893c80ca3a148511db2481ecb44ac5da2e87b4e0362f0bf8d8a4ce9ecc4d37cf59b0589e787991b07c574c0b3541364f3b5181ff91d9c4e26d782b013f35f60f25624af17fbd588c5dd9e3fe2f52bf183aec5c639c399544ecc47486fc1ebe1a8c0875799a54c218c23608e7cc14a2b404"}, 0xe5) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd6}, "61fee3dc487558ac03fab7c517da93228f9a9985fea9b3e0a05662fc1d683caf72529e88694abab1b9a83519c5dd8cd4e2b8a35ab9c5dbb4002ac6881cca0c2eede2dd762d4921a8aaaeef003fc4e7fc72ec49107484f36af74caece360af82b0c6f1aa28cc7f139bfdbb2015f67a73bfe2e27345eccf48934007d1dd6d27f1c2ec22af619b530b372701d94d3a90af70c4562b609cbb8020562eb3c3cd84a2d30b7034d85695d6f70479c1f10c031395360ea95ef14e2e5527e373a2a6fb7ace840cdb552fa887d6004bc219c18986c74f58cf94d02"}, 0xda) 13:17:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x110) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x70, 0x3, 0x5, @local, @private1, 0x40, 0x7800, 0x2, 0x8001}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x980) 13:17:51 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:51 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:17:51 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 13:17:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x110) [ 2335.877959] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 13:17:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = socket$inet6(0xa, 0x4, 0xe87) setsockopt$inet6_int(r3, 0x29, 0x1d, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x135c, 0xf, 0x9, 0x0, 0x70bd26, 0x25dfdbfc, {0xc}, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @nested={0x1124, 0x37, 0x0, 0x1, [@generic="fccdfcc401ec4385707eb5bf284d0c57711a43f5f3d220bd36b4dc501d9d0bc14591d325508343daeafe2a749b8fb3a2905985b9e8d4ec06f5789a8affef195368c5a7f351708984469f132f0ebab0f76be581db23e8dbaa2ddfaaa1a35b01e41c4f643c82e03c7701142beee3d444adb56ec4be51ebddec47dbba3792acc82421b673b2712a4a0b5c5009ddd946c92ca60ba0290b53c2bc34a78a2c523b2f8ee37d7bd753558801e7fe4ae4d288cadb61a085388fb25047ae508618bb1814505dd63248448d4388ce05c650a995203dec84b4fddb455bb96fd5475503ee59001a3087624f6822348e45a79fcf38", @generic="efb8332d0f9562032dc807baa2ba32d56a9b3e422f848e9712ee8da897be79dd44f546d727533ee930a79756e65b08cdee0a", @generic="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"]}, @nested={0x206, 0x52, 0x0, 0x1, [@generic="04f2ffaa76eb76c35ded998a6e2f9c187c1b732f59281bd12362d2c06817bb25e09664b28d6d8fbce9d175129403b642fe55143b7428c2bc2f1ee507082bc436e1ccf7", @generic="9b68e4dff6e9458d20c63fb936065ca5c760305311f0f8ea8aabeab82e01c6f056b438ae85bb2a4b57c3c94772dbb07c9cef3d32b489a3f25cc41568ad0aabdc6e4090cf555e79c699e71efe59aad5090e3807795b9c94f941b4009a17aa8b71382ef8cfd8c35c7bd9e1bccc4cdc902f95b1893af77afc92afa3939566e14529e8fd6b3f2ba962e8cf892f7c9db131c501627313972f7cb1d7aaef14b0d3fbb81facd5d2266c84617dd8f33cbc24ba8ce5", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x81}, @generic="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", @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, 0x135c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x931b}}, './file0\x00'}) sync() syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x9) 13:17:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:17:51 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) [ 2348.977801] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2349.033245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2319 sclass=netlink_route_socket pid=11076 comm=syz-executor.5 13:17:51 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, r2]) 13:17:51 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x10', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:17:51 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d03"], 0x110) 13:17:51 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX], 0x110) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xcd}, @hci_rp_read_local_amp_assoc={{0x28}, {0x0, 0xc9, 0x9, "97a1ec832cf162b443cff4fa97eee7cb59e8dd0d2319c1edf46cac0e04f37ee7ee6bf16a1c36da5ecefc64ef30d447362a19e6bff640536878cc257a36c69c033638a3fe087668ec545cd95e9dbe7656100454be544c670c1eadc3778e179eb2d287b638ea24817c4235f38c3446e24f70d427a8cdc7688eeb1f55587ffa656b9ea3d5dfb9cef2f44950b79173581c1d260da70621d7d27a9e8c4edc6006e9e85f82fc5a27987198ed83bb1562b81a0ca4e904bc86718a996f8789b2eb8f4146c72be13d6ddc"}}}}, 0xd0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:17:51 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x10', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2349.133255] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2349.133285] Bluetooth: hci1: unexpected subevent 0x03 length: 268 > 9 [ 2349.138704] Bluetooth: hci2: unexpected event for opcode 0x140a [ 2349.142668] Bluetooth: hci2: unexpected event for opcode 0x140a [ 2349.167689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2319 sclass=netlink_route_socket pid=11076 comm=syz-executor.5 13:18:04 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64], 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "2a4d7492f8c95a833dae10723dd6944e", 0x8e}}}, 0x1a) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xec}, "83ec395132e0a476a5af5ae7852554ad66c9dc82ae7431733b9cc9bc663aec0d2e05a3ece10d3ec792a00022b39c7db38910d5036d23767706158bb95b5894140cacf3a15abb967a8f387d52c1bdf5adf6e9311150cfc56e14e62a28453ddc182868055a285e45d3a44c8f8059bf13c8c0554b18fa9ab0a2f8414021da1b526e4bf131741d4f327c0bef80727b6056addbc8af1661f05c3a67bd7495a9cd014438ae1048c3282d10f6318af88d50338acd6b4c4f67099b595c2e407ba4635cc0adcf84af960b96e9b5da969e459daabf8bdb17761ae59b9a1f0343a837b27c89c2ac2fcfe7346bb251fbe638"}, 0xf0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x38}, "48c61baa0bb855dbc51f5531f1e4f943c6eaf0e640d987d929aee569c74b7fda94e1dbf1f97bde9d0febb347837a7afe3ca5be2d07028fb3"}, 0x3c) 13:18:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:04 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:18:04 executing program 2: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\b', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:04 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:18:04 executing program 4: accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x1800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x2) 13:18:04 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) 13:18:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:04 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:18:04 executing program 2: r0 = getgid() getgid() setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:04 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x98', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2361.844314] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 13:18:04 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) 13:18:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x178, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}]}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x36}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}]}, 0x178}, 0x1, 0x0, 0x0, 0x1004}, 0xc8f0f305203bf333) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x1c, r5, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="eb0b77e3b13cda6d2c93ef3c7945b4048a343c81207840c1dcc7c6138811ad3d8a98dde1a7ff47d582eddbb46ed6e18c8a60994cc6cae970df0fb963a45921004d269c7017bdfb07e696f0c76fafa4ba6eff496a492ddbfa79d63cd163861bfe3f5b59dfa49ac3c73013654fdc1d239c5d609f7c3b0defe9012ee1da8b2a9c3cf0842a195116892cb3478d", @ANYRESDEC=0x0, @ANYRESOCT], 0x12c) 13:18:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:04 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="001e4b4f816a6143dfb585d6b4c1e9f26132b101e4bb1f59"], 0x9) 13:18:04 executing program 2: r0 = getgid() setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:04 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) 13:18:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d"], 0x110) 13:18:14 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x05', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:14 executing program 2: setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x0, 0x0]) 13:18:14 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) 13:18:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:14 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x0, 0xc9, {0x3f, 0x80000000, 0x800, 0x0, 0x4}}}}, 0x17) 13:18:14 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:18:14 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x4ca9bf20d5c436ba, 0x0, 0x3}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44480}, 0x30000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x110) [ 2361.929708] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 13:18:26 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="e47e07b6eb2e2977615999ade34726a4a8c177add1c0a3557a2a1621cdf40b3ba2d1667216de13dadaf43acc09d95e4804adfc3de1e0a1b3efd1b966a154d80021955b48a80213d44061134e57aa3984b80383af91df82d3e985712fe41d17c1f7d9c206c1e2995a58b5a79f9b66fd5eff569248122346f6d7e7b04c79d076eb6719cf6c66bc8e5256596a73c6"], 0x110) 13:18:26 executing program 3: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:26 executing program 2: setgroups(0x0, 0x0) 13:18:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16, @ANYRES32], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x1f, 0xc9}}}, 0x6) 13:18:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:26 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) 13:18:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:18:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:26 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf9}}}, 0xb) [ 2372.566585] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2383.900578] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2383.901533] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2383.905570] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2383.905649] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2383.907407] Bluetooth: hci2: Dropping invalid advertising data [ 2383.908225] Bluetooth: hci2: Malformed LE Event: 0x02 13:18:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:26 executing program 3: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:26 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:18:26 executing program 2: setgroups(0x0, 0x0) 13:18:26 executing program 6: syz_emit_vhci(0x0, 0x0) 13:18:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYRES16=r2], 0x9) [ 2383.996795] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2383.996845] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2383.998644] Bluetooth: hci2: Dropping invalid advertising data 13:18:26 executing program 3: r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:26 executing program 5: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:18:26 executing program 2: setgroups(0x0, 0x0) 13:18:26 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040814}, 0x4004001) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:18:26 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:26 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x02', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:18:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xff', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:26 executing program 6: syz_emit_vhci(0x0, 0x0) 13:18:26 executing program 2: setgroups(0x9, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x0]) [ 2384.187412] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2384.187463] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:18:38 executing program 3: r0 = getgid() getgid() setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:38 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:38 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0220001c0001000e04040022be5b1002ed040090ff05000a0702000600493a21202264"], 0x25) 13:18:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9b8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x400c000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x70bd2f, 0x25dfdbfb, {0xa}, [@HEADER={0x1, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX]}, @HEADER={0xffffffffffffff60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24}}, 0x20000000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES16=r8, @ANYRES32=r9], 0x9) 13:18:38 executing program 2: setgroups(0x8, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0]) 13:18:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:18:38 executing program 6: syz_emit_vhci(0x0, 0x0) [ 2395.803016] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2395.803063] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2395.805522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11250 comm=syz-executor.5 [ 2395.805539] Bluetooth: hci2: ACL packet for unknown connection handle 32 [ 2395.809669] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2395.809707] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2395.811436] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2395.812183] Bluetooth: hci2: ACL packet for unknown connection handle 32 [ 2395.819737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11250 comm=syz-executor.5 [ 2395.828383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11250 comm=syz-executor.5 [ 2395.832881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11253 comm=syz-executor.5 13:18:48 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed, 0x1f}}}, 0xa) 13:18:48 executing program 3: r0 = getgid() setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, r0, 0x0, 0x0]) 13:18:48 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xff', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2406.429529] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2406.429574] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2406.431192] Bluetooth: hci2: Dropping invalid advertising data [ 2406.434585] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2406.436384] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2406.436424] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2406.438240] Bluetooth: hci2: Dropping invalid advertising data [ 2406.440170] Bluetooth: hci2: ACL packet for unknown connection handle 0 13:18:48 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:48 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1910a13f8b41d279b1bf7eb4ec18207bc1ce910101aa6d1ffabd602bbba18fbcecfb6a77d9c21d70ced30e33a48208d19b8a818f1a58261d856c926856a7c307f5163b5f37b7eb85"], 0x110) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1f, 0x2}, {0xfe00}}}}, 0xf) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c8c0360e32000100054e2800ff0308000700017f02000001"], 0x3b) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x2, 0xc1, 0xb7}}}, 0xc) 13:18:48 executing program 2: setgroups(0x7, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) 13:18:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x7f', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:48 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f00000000c0)={0x1404, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3fab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa75}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x11dc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "7fab0c1a0141dafe7af885f6f64a6ff601b76cffbc1733f0ef3253abbfe79f4880f0b405e1f62d14b91b6b65a94ee6ec362c5b10dd23258ac5fc391e77986c06a491daf608b27a1124efd395e242b0a7eacc2fbeac66d0bcdde18f56c48decbc933154823928d7a7a1197747f38891fc06836bca339e8c8cac30a6361249362801c60db7a95f3e54df63048fb9e2a08ee2118afc279c0c146d96da9667d838f25f1b646b2f91e2a29a4164bad12a378eb6b7d47f4c6b7fc2043defb170b29e4edc6af596879e9e8334c747284a45984dec6710862f5ac91b41e775ead1655f51c06854d76c2380559e2ef89a974341be2f8e49795c7b5b2077d47fcb612adc234ca817d80a815a615b43d06b2afc66ef78623cccaa291577655246427296cb50b27f342a9e5293467497c56fe4a84c145147c0a4ff7e8e0fe66a4deacc961626fba7b9432ccdc625d9e6a19f87940a63b2e39dbc68e16207d0db69800363cccf55b4162a77a66b341623d333f24ff4da75b430ad781f62adc1de986f890f9bcff6e2f40f2536451a9dfa820fd8d2e1c798945e966be0bf796d6763eb778c108fdd0302432a80c9e84641b36baf097862ac6085a196264123f8236df48d601dd53eb575f8036f7ae76b5a7839b40df264bffda2754d56326b8d5dea43d68630bf75fee375713216893a6c34206247a7f3c0e95e0700df0b5cbe2e7b7a0505fc0a636543e661b3f00a95e5e67ef367d74e5e9bc71cc08d6792e2bf540be88baf968387a20423f4a6a0801090a35676b894fe7e3aeef5b58c3168f30592a8488dfa0aecb99441e6fdf2784ef9f1d83c496704f57870f728f1045de1c35fb62637890fbefd9efe43dfdcff56d25fcb7359ce86c1b4d242aa965a676acf921b919875ca29b912a3a5341bc82c4342be6ffcd1fc52f2d1334ac00b16d719faa844d98659738a6749e6f2e36940fc462e2734fa5b0dc2afaafb3da7c9d59878f89cc50b9301e3bfc96dcee33d706a617c1f5d2459aa7fa89790fc271812908a83ea36f32bccb54cd58caa12cf91eca325761413d100fa0b117d47841f14029bf99a39070f24558e99e381a69e23e94ca43d93b3c137e48f52e075f4478597563191b6b3b953324eba5e119c5a2ae89e5181d99cfd930dd25eec0fe788f5fb6108b6c878fd5255a612760b2b5f618d9dd5e907bd885366160f9d0675c7f8195b1bb460960f1bcd83f2518a4c472d4ced5c1c16afec4b8ba8c814bb452e459944f696c30c4dbbec5224d6f00bf22cdab43b67a6e9bd8acdb89031b51a86161610d8d596f779b5961f9ff96f99f1b876a08eb2a88c69f630f348abedc3bfd2c100a9fbf789af71373956153054cb9d098ac8ed773abfc4ae5bde2c1a90c2d5dff37118ee53064db9a4dedcaa99219b21685d65b1cf878a63202c94051879337c63303606f216d444258bda668dc5d37fb2a471fce66794c6ebb4db077ac90c1777adc212d1683630e8ffccc8e14fc0bf4b6423f675b15cc97fa4edca9efa446dbe2582404e9ae1097f0475764953bc165da9afaa88625c5955851dd3c95adbdc93a2d1f36b22cb3ac7c900a79c5bad770dc3f303be32d7388e1059e46c0b9b3835790bb39a368e4fae9d6eb43b56bee8f0bbaf2ac18a87a9e208b10759fff7be82fcc961b0d6761f0f9f8e232d697f07ef4d223c9aedf2258d4891fdcc7ab4182dc7c53cb74b67942e372888ec1a91328c7303c97e4b64447ae4ed6f97be9a2f241c6063426479d651001248e3bc05189e636deaeaa6f91fedee9ee8c1703a95c9ad36eb0a4212f1ad061f786e597679ab8b64316200d983ee21c98130635e4b784f6a7d90e74b53905882be44ea336d94960ae66b7be8dfc779fbf3e0f3df4b42359b16224266a89e0c4fff9a2fe6e793353a95114f95ec1afd4cf9965e565810f7e2b7b9acb7eaf23907c471ec432780d03585b5a3075b8ca73ef4ef22f204a89e79a6bc126425f2ec22f63e97f33a89b652a8b02d4460ae9bac553d315120f1a683282813df2ebb5813dc67bb8c94936c0486e9043c8d2eaca603eb2582db22a4adb84cb6ba7517ded2dd44fac7a27449dd742802d6105c43f26db632b3d62922360f163937b66850d5f861c3994e6b8cc24a21cc31326683b62dcef9d315f173f964649f3c19bfe65e38d979e7db237c55c3550073063a59f4e238411b7622a683ede1d33713d903511d4ccd6ce91366c6a53d5495a632bd7312801aca27dead845eedb9358cbda42394157b1448a9a7e76a9daca686d533126779cdac4a18ca3b2dace593ba78f463d9bf69dd08fd82f4c91f4d73a29fcd40818d7e04bbd442e207edebd3f05a596f1f43b0e13e69cb95ef5718dbe4cae0b7c0f08204b25f0bf6a1429236c3652412f6a8fa48aec9a1500b8a856d35b4d92bdd3742972036655f70a9b53e04562e54435f989d8f9f15a76ceb23ee498671c23ee9e032fc1b80fc77abb65285adcaf82ec3751aa391d84df79a9ee219bf19572ef759821b4b34ed732097ec41d1f5a7e3964e01c26313b0935156c5c96150e42bb28e9114a2e9b80c0ebc95a23d62e1e1fcca74a7ea267001384518b2f7c673e8dce7fc910674c90809b72be7a7440557cf8632688a4b976f04e6d8227b5c8ce5055011ddf5df93f1adb09e538df4ac80c0ef4657d67cfb9d2d856981db4176933d1eb5565867ff85b06aa103fb218c856bc1eb9951de294e82d5ca9a69554d501323fb247304e2b731bdc07af019df52f0d76a98e79aa108f0d77e51c1b11ea855ff5358a6ac580ab8426f606fbb9d9dc97a6917f06ceb1413b010cbab95234365519d452e18bc637e4f48e136a86801d5dd1abcb36e28ada5f01700215920355f14960b4a1500760b79cc9e71d2f6beea84ed16874fbad7775d241bee78f992091929246710ccfc4a0ccbdda8332e29257a31055e805ee10fe5ccf2e530d09813b0a09dca2035863b70fc8102cdbfd4ab7535681dc9beead53be9916a5d71d451a39c24db84b0fb0e40009709da94665eed2c355a4ba3e8f220b6d8ac81d7e4c2db6669fe596add71649942852c5fc360aa07c8bc1e0c3dd94610d3c16f340da035e9ca46d63d1607b862883f8dea62cc276ba4cb5b6e8064d74495ad0281591f9d22836222c74dee8492f645258bdd11330850da9a7577572be40e2eb03c2a1bce363e5ad273d800e7a06a241bb567f447900711c407147c5a3412c1ed695984da907ac8aa0f6a3fdcb37c243350c930a8c360ac9b208bfb79af80779cb02d0181a4247ce7c0648db6617b4a42bb582ba6a9c93a0e7cb7203855524f6b72180958764c855bf80a98616a7abddd5e940d2d5432751818cf251e8abb9b5afbb72e2e91809c0b3cdf82c17cbb87124108225266ff388c170152d40a61e8ed0547f5f002cf1e1258b1a588c3f33b8d62d4ae3683518f6e5ba22289169109f8153baa5d3c0d3c852715f4052db818c7c60493d29e7416de4641fddfdadee5cb72efb3dd0561845e4c1b30022bd28a5983414966f5f9ff5ec0f4d357056d37bcb8c8fcc68960b7da1f26e1f92fe030bb35a8ec0768881d8421f6aecb810ac0716cc88bf06b040bf47b39d23cd4252ca13f5930ef7377146ab20042be2d752d42dba5c88300690c05a5d9cd6ada1e3c15397aa86a99959167fbd3159d810d106d8620aac9ecd8e1f672fb0768198bfab76c48f624152abaad089efaaf628bd3dd13bea8a4399f47768e2449f1bcfb8e9118e63b1c4419d057e3b33ca7dd6b3380a44a214c76cd100488620e1eb1b39516172bc126f5604f7df36796727aa8240b2576844fd44e71c5f596131e0a195ec8cdc1b1e0c55ad7fb70fd51dd9698158a9b18a730f77af8c6da5582fe77e4b87931d1dde0125fac28473f3ce6dad753613d461db0d0f353693b31596c9a8b9a96801973038f457fc417f96cf1ccf04f65c8d5ded5d1ae5f5a9a28ae1153c097aad438eff795365f7a74df1117d28228adfa5ff75372d69adbb7a184d4b4739ab920ecd8d0d3db03827cfd04b27909ce783f5548dea9f368053ffcbab508a629c5d57a683ad0fe9ce90bee563b7bdb796410f123869eded4ca18487aae2c87be24a743676c04e63a68018a9df87234983ebe1a67e041c00090bb70699e2227adefd8d0f1ca15b0dc8cbca89a6370001f072e218338727bbb48878cc901ec3886839f33a3d9814a678a951ab59ddaa5735a7ffbef4361626513daf3bfce991eaa5692be6a0e2f2f0610c82c298d5f5fd2bec026c1dfaf317104d9ecc8ffda1565b635ec7da1016062ae0c5ebb70fda483b0d22b77af11cccba6da0bfe99a9e5b716695ca87c49e78da59b980889f0388c099a8816f4581995ac96a4e23ce95ddbacef44c5ec4c71345acf8af98a42ec3053811cb362308bb623a85df63492a9c403212c5cb066c67889fbeec73cc0c917958e606bd33edbf21823dd2b2b61a87db9be41e096feb24887ca5a06a8235aca9aca6fc767d511ebe041cff57816ae49d2b867840075d227fc64d00eebab3395340f8399dea3f7a74e88c311b4ef6bb78c50254598622d29c4e6813b2b8cc016994148d8dd78c9c0f6aede0c719969378c40bb17335c32b949c7169a9c39cd9e4fa1b40be1db3f348f72d64ada40f476e9e9824db73fffaf656c705e43a8fe218b2cba3b51f0732557451f7dc6895c6d5171840b3d09e8c73ca42be99531bf6f532e118c9ff642ae67fa1e967f6ea8b2bddb776828540541dcebd28bbc133dbe19f20df495df9fdb708c28f79315dd83b06cf42042a7b04fcd1d144fc325e10e8cd9ff012d5fc62012b1aa001bfd5773eccd7d57000a9d5566f834f5fdad89557818b594526c988eff284e2fba1cbd13ea87a2409a43d99467dd46816e81e427892701452ef4ddd767f81f861791d4f86aaf78bd69dc3fe1b23cdeff8d9068cfc87d73abe37636f7420c612f68b24be4bddda8b4dcc4b232c2804cd67ea531a7f6a6a89c58f35cc375ba31b4bcc3e7bc771f937e2192b8ccf0370d3abbda5ffca50a6dbac033fb4736f235724a7b2e81c1bed093bc9b57fdba71fabd576cfcb6ed4c60c76d9f6ffca22f63f983b3dc1602119820bccffd52769423abf6df406773e49c56175ac60a1bc9b3d266d279f4f4056faef5f5414ee7ce4798f538998d56dbe4a4310f735629d91caef9a8ddf778e9827b4b15ec6bbcabb934f05489610e75e372b01aa049ec0bda70de5b893545bcdda1e0c3a1f35d8a21d871a74d1095073a057125f9fc3cc5d47b131845e848b583b2acf46c67d355c05b46e0a96986cb1a4bfc44ce580490670960360d218d095d0aa996bfbdc19c130a52c27de6ae2ca41089eeaf93739175c4ed2dee04605d2ba8112b1b582746c91c60f0581bccfab8722218390654b349c1292692eb4cca4f061ced5cbf2eb82e61fe0a91c7c30997ae0b865b4dac997e6c56c0a388f7a96494239f59b8c3b9ca003250522bb7b61d7afcfc038cc44ddefdeceb552950f531539616092c768c27f77a65f40421ae40c19e681b9994074b0d2151a5eafedae721ad1ad6b0fb54c3b2e0b81831258a7522728dc35465db4239a29806473c85dd0cc6b55c7c35be9797841b1aa22852b07380809e117f8682b5ee4f2afd7d8a277dad2175c71a511497a1f427d2c248b7b11272147f187e56db599e54963704231a56999a3550388565b7e98b853a429daf774225bee510ccce2610d5676d516c3f5463821770ba12e446d255772b62a3599def02825146cde0"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "4e61f9ec4333b2d75192f55a68bf75337c52e49ecc8fe796144aef4ea56cbe7372be"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "63ce73f46e87c3190cc94b4b353e0cb4c9f3c3d18799d84ce7fa33bdaff186915e401e"}}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "b5c3f141fd5cf666d50a8ec4a27a1e0892365fa155c01c1678df5e4d4666bccf1a42beaa31f16fe03ae888863818e2007a2cd9dcf5678cc07745e991fd69fd0f0ea89700a669c2ce86e0c71e77ed87dc80d9612e598d20789ea037000d407eeba0bb44c402c6ffded12bd2b24630e200630b1b77d334f6e387402ba864c1401fd14118e37e731835824907e93d7573216b6fa856dd654e60bfdc443525fc8bbb9d2dae144f4d0a56d6d811a214c1579e6f8fe690b4661dbafd7daa3c120d5eb48364c6ca1fca3b10a63bdf993a5891309e7b4a7d486221512caf44bd5d2a008cc9f65a4857e7a3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "ba1da60d93b1c06a3834c583c3ccdfe3518cf84c0e"}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc208}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb86}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}]}]}, 0x1404}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:18:48 executing program 2: setgroups(0x6, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) 13:18:48 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed}}}, 0xa) 13:18:48 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x65}, "1763a2b1f261cc0929d613b85f2fcfc9e2bd863e3c4b29519ec381910efed23a58691988199b7a31c811c789ed7133694564637e6b263e11fa4ce05cc03659615419723df15bd02331221e4bd840ddddc0e519684e399478ef48991e962874fde1e4966dec"}, 0x69) 13:18:48 executing program 3: setgroups(0xa, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x0, 0x0]) 13:18:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xf6', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:49 executing program 2: setgroups(0x5, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff]) 13:18:49 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2406.638719] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2406.638765] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2406.643182] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2406.643219] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2406.644942] Bluetooth: hci2: Dropping invalid advertising data 13:18:49 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:18:49 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0f"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x32}, {0x1, "345d688656c93bb00e2f95ae30e6d83f1e1de2fe84e06ea73fd07c46378f5cf58b15158fcd0ac021c9f7402ec3d2eb2f"}}}, 0x35) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_rsp={{0xf, 0x7f, 0x4}, {0x1f, 0x1}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0x8}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x101}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0xf227, 0x0, 0x200, 0xe8}}, @l2cap_info_req={{0xa, 0xa8, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0xb, 0x5}, {0x80, 0xfeff, 0x3f}}]}}, 0x38) 13:18:49 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}}}, 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 13:18:49 executing program 3: setgroups(0x0, 0x0) 13:18:49 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:18:49 executing program 2: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00]) 13:18:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:18:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)=[{&(0x7f00000016c0)={0x1514, 0x1f, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x64, 0x0, 0x0, @fd=r0}, @nested={0x206, 0x51, 0x0, 0x1, [@generic="7e4ba97e10f3bb4c92bd2e7a40392907b430da31121ee18e15965549b90a93910745519a12c420c19eb6f4d02760f38eb147249c30d8a43e36463d69322469cee67729029de2d1c018ad451e130a8a308b8212028bfd9e5d97ed37679b8a79c2146e2b24b8610d8a109818a5c375fd8dab76c014a2433ef87623f456bb12960fa55345c964075100052fcc68b7e34813d3353cb8346938d779c11d6fe736ffc16ee6919661fa76cdf5509a5a77b618c7e1de4bfb1c44e4a0c500a5e846a08ee8fc097317134d22bf669b6ff69c719089dda23a916b492ea5cb7d87b9db65112c8d73b0bd3b117854392c3fceca8a7b69429cfe437bbb", @generic="2984c2fcc43af43949a9d3ed078c2f43cd2efb4ba3c0818875f1e0ccd8bfedce9a91be5e9ef29b5139951041fe90c843043bd066487273eaf25e00ede96b8473303210a0da78216c1089f2b5811c6d0a0a17a1d5a7677f5c1b230601dd000f94417e5213e56d4928f6f48b8725f79dc7", @generic="a3af5db5d71578b4f0c946aead85adec9b0a67e1512d172187ee487416700b6618f080da107bff2cc1ad0aa61fc220e7a1e909b85aaa886ded455a7ab06752453e0f5fa18677ac4a5d96aadf3b581c1f6e239bff14c783dff340d35384f5cf72222c111bc9b48cc6943d1dbebb226fc8c60ae14bd4a26332c6de166d2661e9b39ab05f71c5454a28c25168f13ef3230a5e6e8605b4440e7183466830"]}, @nested={0x252, 0x5e, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @fd}, @generic="eff2a3c9e364011a833b4b1e9af30d80797f7326d2d0c7caac9f22468b3c059a39545d0aeabee8b45743c3e4284ecfc319b665858f01622ee61c7b2856bda3dce475e455899e4265e3a9fe49ce4701d2e3aa923b79696532cad037416653bc2fe6d3d86d371558bdb172ae55698e1d547a164569cfd3b12614e01f0cbcf3ba777ef6eca7cc64a6300529c10e794ac6082c73d5cab13705012dc7ad5ba6682cfdad82c0f8caceea680a9ac35b8421fb42cb4f8653130dd780f11f8c414ab4e3d039502dcf7baa", @generic="527cec96dafd190d2bda1c1f38fe3d2e584b20d3f04159459ffaf5e248c033c8d1c784280d954b53d4372354065ce0ea7dc87cdececc7a1be71d104964cfb4190924cfadd60f96609c2e21d943a11b82330f4e0968e470da822044acb1c92f615e4116ebe96504ed70771e2b9fca63a3535e409c93af916a0a462fc4339a4989262e1c44b0f8b07d5eb3d8916885905a8c239b93101ac29b34f37a037356e694eaccfcc429b02c8c4d2f26559b9cf8870d6b67679347012e02f02aae970360d54d07ce50dbbdd1c5c96956003dec6231718e24a17095f38c9fa0635de0ac1cc13c931094e5aae9439de64920", @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}, @typed={0x89, 0xa, 0x0, 0x0, @binary="baf6bef651dcd8d41fd7950209e1929b1675efa76d77ca559f2dbd3fcbe1f43f78ec6cd67e5786f44341f6ff99763ac823c81353186984a1dba71424c7d1eac03eee9cda1e676b3d6e894dc250d98e68f4790409a75436a9b186ff4db0581abc726083f257dc021e6a47066354fbfacc09a31ff2aa4c456406349ad0c91db18268a02fb8a5"}]}, @nested={0x1050, 0x70, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @fd=r0}, @generic="cac3e981e95819e53e50f33b4bf294b6365761b79487802b11c5e97d51765d8cf3b8a247a91ff3f542a3cf0b30bb5d6ba243789d1edb1acc", @generic="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", @typed={0xc, 0x56, 0x0, 0x0, @u64=0x1}]}, @typed={0x35, 0x32, 0x0, 0x0, @binary="85a403c3975e85100705bba583acb7df129bea72bd0aa106ec947d8e53e0a2273c5992d0a3939d94f956a04a95e7509eb8"}, @nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @fd}]}, @generic='9', @typed={0x8, 0x58, 0x0, 0x0, @u32=0x9754}]}, 0x1514}, {&(0x7f0000002c00)={0x1664, 0x21, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0x1160, 0x87, 0x0, 0x1, [@generic="97edf668af7399736412faf4582e785b8f760b592014f19b82372dcdc1be97c9e294dc63d7b59df79769cd0420afe03fd26fbd258cb06a8bc1750b17229b88799cd075656561e5bcde7c235568e64ef64a022f4743ddffbaccc072a5da43a6d8738445046bf87f21014c7b", @generic="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", @generic="64163569d48cc85cfdea31fe182a448f08bb4c2329f2b36105d7d511e1c749494ccb3ebfe1c2c556244fdbc2bc82bbde4c1fefa35cef9494", @typed={0x8, 0x3a, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @pid}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x3}, @typed={0x6, 0x6c, 0x0, 0x0, @str='.\x00'}, @generic="8086907f5cdabeb8b14d27ca19d46c9b7dee43778b5672088d444578bb5b823b02849ed9ab1855b6180095cf0407dbf87feae6b85613b8ac55fe77a7ef662a81e3881d029ed68d34195cfccbcc7688ae529ab05403c0abb5212088952c10799d833dfd4b1d7698e096ed62fdafb7a541c48d99318c41756d0b17c24dd106af3ebf43f4ac6c0801efaa", @typed={0x4, 0x45}]}, @typed={0x8, 0x7d, 0x0, 0x0, @fd}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@empty}, @nested={0x347, 0x12, 0x0, 0x1, [@typed={0x14, 0x11, 0x0, 0x0, @ipv6=@remote}, @generic="d1ab9d9b2d6f1faa25519e49b80077c9becb25c0ac07cf69294035bec5191422f3c80a72757e4095a2f5271722b5ebff10f87eb2557d867bb196a61b2aae519a69ab5b0fc1059cbd40718c60a4a8f594267c73f7e63173f61cc6f6ef7e0fd888c6f406c30a6c67ea2a9f6de00991daa38805eb38318651010940908508e681bb09a59a3120c708535ea33241f1af", @typed={0x8, 0x577, 0x0, 0x0, @fd}, @typed={0xc, 0x21, 0x0, 0x0, @str='ethtool\x00'}, @generic="6d3b9cbc8eaad3ddac7a4b1ad7ca6abb462b82e0a9cd84f33719f29fc1913b4c245930bbfd106e683064f9ca33f13e661118f5c2fde06720c7a89a930a2801d9556d9279caa282011f4fc09ab4900055be95d38d7a27272efb326415fe620c26843179643b4cef5b48d2fa862e9f7b4bec4e93e6ad3baa8cec6f6cc0757228232dcbd22f326e96a487a1b42a812e2945e1453e3e2089cb78e495e9291576dc3ecd985f55ebc00958c915bbedf7403d9861b89548221af4a350dcee3fd28a5f4a2c575de5a3ff91e6f6618f22590063c3a4e97ead1b1addac2b03f72af947", @generic="bf650d810fba266e44764d0bbb24c35e9d2f6f81170403385998eb7305a77f2fd6d5f0724b6d6e1a923f8aadfd789513879799875a215c8cff14fc6eda8a1571684b0a76d5ddfd90bb57f0ebde08d42dba4793b9adc813aaf5f193fcbf32b4d31d2fb80fcfe7175e87ec8e40773002c8ff06aa63a8113d392041ff33f2e4421a0d1d3faa99d8f5216613ea9294ab90e44cb7eae6b353a64fcab8a5d23203587718c9", @generic="d46f4086ff5395a84ccf9870a2df02f04f54dff558e844242f42b239808b678278b980d32177fbc113786c3cb80a7b3d5e5311ca8c84abc265fe456887ff72624fb36869f011329b94d2c0ab98f2889827a908ab4c8f33527e1619226ff95fb1c1f9d7da549193a4a270d9a85b234df29b1acb16390a74872e1ca99011258b480df482473120b2670c6b899c3ec01b12b84e78ab6de312b2e9b0c799d898a2c8eba7647381d0051475bc3639709f691a081fef3fec67fc59868d02076d5a90e1eda2c1", @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x3}, @generic="4b3049569e3d65bb95553785beb7853a18c99dae2b6d9ceec60c2e8c0f0f1405d47ccee1d0e91508b5fb551c840a4894ec96", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x3379}]}, @nested={0x187, 0x24, 0x0, 0x1, [@typed={0x24, 0x91, 0x0, 0x0, @binary="d907e898aae5a0f4566a99a7250c51ba24260e524cd84f343a1cee3b22d52a66"}, @typed={0x8, 0x8d, 0x0, 0x0, @u32=0x5}, @generic="576090832a29a58fc0036a0870e36f0838fe47e3574b652f8603304bb1208fd43fd8333f7fec5dd0708704aa12b238c3e681e2bfadf9aeb008cec6e376768e994647f3b3807416aa5c9d7a17662c187c9b46f1ae23407663668df7", @generic="e52a3176ef7194e425fb5a9b24a7cf42728b623e5cd62dc382290d55e0", @generic="6926d5fe43f0769312bdcb81a9f354b31f93b9a7649bea2c1dcb6604f1b385a20f8b31a8c162c468c679fcdb91abc9c66c33a025ea963a71422404695b81ac9949a043d54e1493c22b8fe49fc3ff5c8793fcf5c571938b84d1dafed07bb58597cce462d086a7aa10e872deb123ec287f856b164a42f80f8b2fc22229bf0ed02a57323f71dcbbb0721da4a3a51af1ee9f4a9adbe2c812fbe4aa78b038ff2b1ce84fabc143798542aa5c30bc0aaff3b1b065f85c3e4b968e3255c7c181b99f3fe472e45bd9097ae656025afc980118628c8fb1093fa7a574794cf0ffee311eba"]}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}]}, 0x1664}], 0x2, &(0x7f00000044c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r2}}}], 0x98, 0x80}, 0x880) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="7f50040015cfc625af70ce9e42b5aa27a0267c089d88565a5faff7bbb82dc2b46f582abff431f21b6947a22d5217", @ANYRES64=r0, @ANYBLOB="010000000000000000000a000000040001800400018004361df9e872c1356e4300d6ace6f74903551fbdf11a3931266f46d753313410f041d8ed9127cf2828a1c409c6b8c635b0696e63cb8414abe5e64ce5a594f7238e6fe42fcfcc3a72cc3f80956c2be0d4e5708ce0b783537c29d09b"], 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043ef62b5a3202702fff59a6ca680d020a0300aaaaaaaaaa1110a13f8b41d200002d76d3ec18207bb1ce91e000aa", @ANYRES16, @ANYBLOB="d6491afe97344a0ac1ebf83b2d52665f4da8b19b4548c2608937035e15f601fe5fc43e59599cb742c0e55849797e21a1bffd608734d8a38e721b862f27eb50b24c7fefc88683a834545f285152a31cbc7bbcdf8220b50816d1213ea8c60ae3ab519a0549f015a48c21374b8c663a01b9afb0fb276a4d", @ANYRESDEC=r1, @ANYRESOCT=r0], 0x110) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x122c, 0x0, 0x4, 0x201, 0x70bd28, 0x25dfdbfd, {0x5, 0x0, 0xa}, [@typed={0x8, 0x36, 0x0, 0x0, @u32=0x3}, @generic="75ce2d928ee7c8d43da30199751369b12ad0e1307bdd81740a262860e2d218c33c1baed0113568bc955f0e774576c86c730eec60b892c3231aa2382fcc4a46fcf9a70cbdcad9ac9ec72f3647008737dbca1c0baebe4f22ab4d4499880fee08fc61e8ffd2ae3850e5d7b05b43bdb6120f08b64398954a27b488f355b1ab39de1ef794255a693bbe35189ba8e603fbad511e57d5", @nested={0x117c, 0x6c, 0x0, 0x1, [@typed={0xc, 0x15, 0x0, 0x0, @str='ethtool\x00'}, @typed={0x8, 0x20, 0x0, 0x0, @fd=r7}, @generic="0131518e51456515e9005b7d01916c89777ce0118c17258bc320c59be30fb47a15844a5702358d819b349df03c0a7bca075004060d06c51285eeb25490455564168ca96da760d4d8455f2e771905b2f7867fca3c7807a67161afc37c163ef7108f544d960420740c57aa3d3d8a20606b1aa140cdb991a94eeaeb4f4d9d2dc3c6e2db0b00c4224de45b89e0ebfc25", @generic="d839015713d9338fcf7b7b59784b1c", @generic="630af90638068a01cedd6140f6258c561ed7e90be3ccdc4b826cea7f8a631ef6b1077dd4dbc5f5bfd384c1a363f830ad08aaefc71604c9b0bc05738f74d436a36ea2b56f9fbe3d476a14e46f4c27bcbb07b42115aebbc2388d17d34442bb49dc13a74df901aa78be2823a793a724fc8aa84722c701d34edeceb2b6a2540d172d6fa11eb65716aa4524ffbd44ae97d6935dfb03f37810a475be9220928ce3ca7c49adbc29bcb300537d7a1e4ef4bf1aab9d53148d09b2eb628ae060f5f8db133fa95ad0", @typed={0x1004, 0x8, 0x0, 0x0, @binary="99af97e430985d7b8668c609f7c9d550ba0baa6ba2e32b6f906b658b2db78a5ff933f895d9be385cbb40deb69e623d32f2d551c7cf208663bc1fb54aaec854a035b227d8bd799ff9998bb2a4be6c7cb36b8628f48bac05d0c283150e00ab920079402d215e767cd4ddf8f5cd263b15282ae72d8821d9b5ad0f2848d98a1d38efa8b2343040e361d1e1b3877b67cc8a6d2ae91b7cafa1d883d69e32233fd9541a9b872b5bbe6d6d5dc51e8dcfc9bf8327e6bd53267ddb103a9668c9b548c41e5c1d67a5e282ee300c54bc3b98b7dfad13b5178af94c42fbea15f5f70a6a45af495f63617fd0a845e41eaa0dced883ad4f2510a9fce2b92a770a0e68641c4dea6d74bc25ccc07f5c33f36a05230738d8ecade4069a19be19f8b0245803147294dca1bf12b77167f6b15d43c0f6d1821ca0eca2a19ff6ae977dbbe9b7f7bb5159c3b1bd12c9cf7691e712809bcb89a6d8e4f583492cf83286f7a3d6c93dc51ed89655ab54e28535faefbc12d0b23cc47174db8440f144ac5ad75ebee3f1f2370d240163e9849bfb0c457c8ba3a251d539880b6c153e29461c685be38164dda8c2b0fa8007f366ba85a55f22219e0ebe63b839913833d99348335284f211916c227c5894c5fe1544f114034724cf29d738f392c1d54898f28eef499b27507d262cd4d0711e3f1a62f1b7ad4e830eddaf876a933c7709cdcaa9ef5ddcd231756c2ad14cafb9f01fa9bbfdc5e9dc1b1bbea1f785a12bc6ea77d672dd398f04e14ce770c34141029d0d362a9d25e3eb23a7ff77a71e08bf749b24a9b1b1c03a141f77dbbb973ff5b483b84a681e739758b14935d6f1666c9a3e4a35515278202960cf72938c6879c455ad0d5f69e0c1069a6f92a20017f6c6b1a58b5b219efd6ac6246aa8d31a1aaf7d0816173c7582532f6afffa522bb9a5225ec96431d5526aa6766f3a3244d3b7c93fb5f40e873fd0595c2d36237592a06b8b48287430224aa0bfddf866b397aa5568262b4851194da6954c63851ce7d7cbf1013d4c20afec62c6e1a5c7f1162bf9c370a2d1178e1c089456bdeceecee1f3e5c756df72c2e732c923f2bf9835763a276e0eeaab9cf0f993118ea0d536cc30e351658f9f24df391bbf5e2a84aeb51b842b2e19d246e48e609c884e3a8e4598f74b2094304d30d2f05fda089dd967b97f4254bf7f99bdc16e9ceb649421aedefbc258d18290e5421fbdf1fbbd27ebf6713e9f57758058014d7d569a268237de4e5e32b76df5349b771051b4b7885dbc6203ce1b176f808667100d4a7311c847fac4ffcf3431d3adf21cbd0c1cfa2f36097149fffd5ff9438a6bf3835e3d053ec0e28cbd4b4c5da9efb1d98b05fbc89b5a475af9276ce6bb159a623957f843042dc6e50f3943505acb96b04d0ab7e2e4106d8ce1ee728426ead14dbb051b5c47611e532335f437dfb88fd7c4e05488679845e9777e80814bea03b42af271c9be6e7af300fb3c081275eba5539eeb7bbe45e6998a5ec9fc182dae8134721ca0440bcdc7566a4f6d1062310da68e54f03650a49aa3a30efcb83d849c51116aa311a9dd1e27f0f505e892bb4ca555b4cb69dcc0ac35ec9d4e863aa45f1dc2a89ec2694f782e5c57cd407211be989dc48f6d09eb8315a3909c33131e2e5a742c23816514b48f552b8ef76222a84c3f2794809163e273678ce31de2c90d2379b6387a6b5bc3c21f27c0c8b61df85bfd2293b34b204c6c7e52e7cc3b91b1f081ccac6d26b669f8f792320a26be6e7c5307754b1b45035a928d73ba5ac5e9db06afda41ad749f62335918fb952504928fbde49cfd552cda63064d930defb24c5780c014afc0ba1a99c9214028e36968c19cc632e59ac2441a49e39e5fd971c23b76b66cbf8233ba3a4b2bc2fad275734a9e1563b4ae9fdee4875701671f1efb756f47d5fea6840d668a40c6db2f43348787a5cb80b8c7cac3e0ee99f9215b22db21e4aebb414f4c5acbd76a4598cee3cb78c422ed98694a7540e52ddcfa5ff926e25d86b92980b462d3638d92ed27cc33dce6a3c4bad3342813edfd944e873c6eee058f43e93465034cce02dad4c5cb4a65acaab80bb3394378290d460db81fdd3500e1117dd8b962b3ed5edd8d466979df880f70f5d1806877189a1b3308e18d1c4e6f0f1a14388c663a65d617d205d536e6e3b2f7749dc12c9da26688a962cf94fba57f89137827c1af3d44e77ab8471f1c1a5c09bae286808437db8b1dc16004a1f3f9caa9fc886aa3ae340f267c7a1d5ac7da4c63212cbf711694488e7a8ea7e6778107d1d5d21c6610903ee4fe50fdd7df1be71d038ee7d62bc9905a36a55146134573b8c307ccf363849f75fa0e56e0299555ccae1556e30518c7cd41ff6bbccff0b4eed39ae251485feaa0ed4d1618ad2b54cd23c25f8ca1112e3f3936d7ed8f80e2e1c4292efb80b8e1f3ddf13a58e150f01f200352d208a63af28774e92715fa303a0f9010b89b1e05a555e36ca309cd95937b4afee6007d0ce8ba959d61ee23258427acf66f7abcc3804809229de0d3f28d7bc46f831d2ee43a4bbb0eb0513f75b994c481f554c05ee3a685624847c5ccf692ca0e8debcef5d8fc84f48c43d1c502b174b98babf54a0770c9d550bc38fc253c89fb25fd741eea2d2c545e083c7aae977b44ba063b98da1d387344e3cdaee235dc20af74ff438b3b7f101286a0d502b7ccaf28ff0f32f81cd36c832bad08b7d20cea6a523cf661b070c4c39facc81007f94118ded88d3a18e015cf707d9093d25af2e3b8677de6165d95ec1753b06133ad032568d15562c7c1dba26e4748ada4a517c7f4a11403ceffd5e81423a03c79ecdbbc18a1751dbd00380c15ad637baf50763e95957efecc3740f35d334d4af54fae8c79eea4d81b967b4025a8f759ad3a99f404c843ffef360fb2e1ca075791c892715ef2f4b085b068b9695df3affc0ced8f3c61787ec1dc86445ac59e855845b86c6b79145f52dc0c03fd38a2466a298c53a6dffd2c958d184560d74d34b1a3c460fb144623c064123811ffb01870c419e7208fe4fbaab23419c46de02709f68b5df45c7afbd35a9b2b6f905ab7893851e6048a2cf4592174607df65704403db0989f616372dbcecb8c9eeb10ea3cc66a57ad266608c8bfc68c51784f6565eec10274f74c7c3613357407fe71b4ef1b842feff82b8b081907eee8e1000cb471987b4b93160e1125dfff7e69f04e51cfd0e0d4df6eb71c29bc08fdc99b361692a1be9d7f366c4ce350ed1fb100700d55db4f9da72edd0ff2840bc10889bb82db3619ade6bc20f1298ef103d1e9285be39b9b1798e47c246fd87db39a98023f0dc589ae4207cd612e7f9011ef5819d0572bb9e97761cff4ef3dfa2723bcc9f261980710695f4535b82af8185265c9f92026e18fe04f92dfcf14637886b945dcf1ba6da77f738b800cfb7bdf906372f11784772cea347780c7e7defc34930b2b42c3fcdb4e929dbd2e713199791b938d3b62ad0dbd4c919e302cd4c8189aa76681807192450184403c04a959ff5a8441859e3502b78387fb4726bb15dd0129809f43833e22f0475e759c339cf199d3199fdbebb742f5c77fd6e87eab4779f74892e8aeb86219879732f82d858d5c6e9108755a261b654ccae1d06741d013341e107a4320f20af69fea95f2530ab62e609aa22abbc1e98a1fc712a215a30d621536a0b33c8db5a17c5c7bed2b16154753b64b5a1e2d40d304a121ddc35e3a4e687ee3a4a88e507d65702f63a31e7c6a048c569dd054694f7c446a0bc220aaf6918c9285d48390d44348887ec16b35b651ca81f7ce1ffd3467075055417d16bcb7aa84eff1414986538dcbe5179f7bfe35b89669dcd97a272ad573d208e6aecd37519b5ec253e10df5b0683dd379300a6c7f69a1007740ab367555c8163926647bcde392917db356e19772954c6f948a61d286480e6b164a68d3d51a2af3f5d911c9387a4d1bb4d1954b63866abc31b6bdb3ea95d51e6be2465ebe49a5d5f2c25d520bea5172979c60ff55d766b284034fa23f693c4c7e130fa6d97ed353166b9ff915eebed1d0fbb0fec6900c05f25f32e5167493ab44d2cb386478b7c74d2bdaf474e9d954998cb7558f418fc4cf47a344ce814cd76c5f6fe97bf16c2ddaff453aa604838c755a780a356dddac4905da2c27aa1db8ffb4441cc53b18596e75c316542f39d6ed5f62e79762459996e713e3646d6752103d769088f208d3696e5fcec0a7d23b1fafdf55ce8c256eafa8ed5d332b3e12e6c1dc0a14e0c48cbe0dfc27ec10217302c1b731f035597aac187bff440f7cc6f4341ec9756ecadf7bc0cd24cf6296a008d378da046e93458783147377453899ad5201c21f2c9f046398383e257ddbd6a3ac1f4b071849005a3348fb880da2d5f993e386bb6bb467dc05a293267e8b2d93dc88acda766f6d27300a7be5cd30b49850d2987d72d786fd3af21b94ced7ad32dc04c366ea051435de34504e9a053ea0646d87bcd011a2f8ed571d88ef7356cd0b4a05dccefb225b3b99e76561c66d1794218bad4b11ea0e5e3b7ae06437d35a7b11bf09f1522da1c12b0f70725c79aaf20084c45bc07fe7ff65f6870cfcb7cf76aea5f42b11853e6dfab66b91fb3b8b9bf44a6190accf64403480e307afcfe729096588d64cfa4210d87e1ebb301ea86ac8088732b26f3664c3ffef3550c54d47c1eaae8c0e46ddb079638eab3b11c833a9ecac0d544213bed5b0d23a9919a6a20369fff2a5d00fd017a1df25f41c81da2175131e527064d5012b8e1a8b552cdb2a551c07db49f13dd829db34e9a277fcb05ec60469644638fa42f532e8e4852e9b361fe82e093dbbeedcb069ed4290793ac30c0bc0f8d793303f3aa00c9dda0163c35f238296a648909787c43bf26adcb22383af22128dfb34aed624329669c793e81bba500349414452ef740f7ca625b47638c1b89f597bb6a0f94ac7f60661478fc6531f90c68a433477d4e368163f602a976058eb8483a8a1baef1e709503a62ab83e3df5d53f6c5b2a00bfaf842b45cfa1a02fbb7006272cad57911d7d0b515f6acccb49574a47276d56886003c3d849dcb76077b43d7e390a60e75bc1a8887778d27b04ea001c08dc114c7fdb83ac174ac47f64de0bf804b20099f7dd380c12aa6d99fe88e0d4453b0be07f8a4aa4a0c4e7e75609be62a78b72d5f276efd7b5cc5a4af1e85bac71882dcc963786f0ba62bfec92a175fa13598c4090eeafc442db550c1a2c1f8fb84ddc750631bd881f2f138a5e9c49dcb71613f1cfcef2898c9af21c494298771a7b06d9cbe63c60115af3414e3d3c5cd920c7214258abe81a613ed5ee7e8dcb043afe89685a74e80460d8f6187d1ea8cb23eb2ab17361453cf99283b4261d6b0e02805c3505b78f5475c9284b5311ba4dbf61d31a2b95ea4fc0f3ced17c9c15989f0ad13c0f7e9016ba2b4bb348bc41cf34690d58d6b269cc74ed3c9ee5aff3eaca059c72f6b5f2e90825a2e0441f81ff108be033a9e4e835ed96bfc275b78916c0e31f4262a64193445cddcf624cdfc37b8bd12ec64b35532dd22dc4078222f053c7839d251fdc84c2219d5eb0bd0b7eac214772383af0f0ac088ffc63b917d9384ea8c16a0f25d8612dc570ef2d4b1dd2d832a1e15b13a4270a5d7c9c7472b7ec00b568cb7e504f91035763823cda6c4c64eb5ef9817280f989fd7e0a2b180d420d09b2bb936ef5262136ac82afcc06a5479c6469be384727e36e9c600eb6308f5edd958e2585c8eb1ba511b05bcc41333517c6fd"}]}]}, 0x122c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) [ 2406.941153] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2406.953816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=11315 comm=syz-executor.4 13:19:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\b', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:00 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:00 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x01', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)="db6538b632f02ca3b31de673da90c239219e3d20a3b48606f7810d0782b15384b5ec978cba27940ce976d41e5aa8fa30fc0cfaaaa11f6c3630da9f0178050a2cc691b63b2c854b2162f2fadc9ac68a39d2f19a8de838819a8cb7e77a1c64ced44934744a5d576f0c566f935325efc72c4a2760c237551eb4aee854a4b80ca4cee058d19f248c6324a2fbcc187159c094a0962f030bd194e221ce99f50d9ebd41666680868be4abb7d6f52bdc368d3cf9b5d7f2ca7c9682477003992f7793a081e3a985d15cd7dfb2c8b17500d9c665af2e1394933cee6227d6e6", 0xda) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:19:00 executing program 3: setgroups(0x0, 0x0) 13:19:00 executing program 2: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00]) 13:19:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:00 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LOCAL_NAME={{0x7}, 0xff}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 2406.979516] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2418.385990] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2418.386483] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2418.389082] Bluetooth: hci2: Malformed LE Event: 0x02 13:19:00 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7c}, "49cabf479ed36134ff1f4579a768540e211c0a38f7877e08a90c666a2d740615f26a5e2f50c523648eb2ce88c2061ce6373a9cb03f7efbb81d486ce830ec5fd534f2c54afc07213241bb34253543a6d5ef9247e599237d08504ee588c647fc7bc425afc90c0bfc94682c2a7524028d5b148f3cef2b9533ef56ddf52a"}, 0x80) [ 2418.396183] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2418.396205] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2418.399578] Bluetooth: hci2: Malformed LE Event: 0x02 13:19:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:00 executing program 3: setgroups(0x0, 0x0) 13:19:00 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2418.462305] Bluetooth: Unexpected continuation frame (len 4) 13:19:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2418.473509] Bluetooth: Unexpected continuation frame (len 27) 13:19:00 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaa93c8e7aa1167d0a8c52fc81448590f410110a13f8b41d2"], 0x110) 13:19:00 executing program 2: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00]) 13:19:00 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2418.593789] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2418.593820] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2418.594829] Bluetooth: hci2: Dropping invalid advertising data [ 2418.595242] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2418.595706] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2418.595722] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2418.596666] Bluetooth: hci2: Dropping invalid advertising data [ 2418.597086] Bluetooth: hci2: Malformed LE Event: 0x02 13:19:13 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7c}, "49cabf479ed36134ff1f4579a768540e211c0a38f7877e08a90c666a2d740615f26a5e2f50c523648eb2ce88c2061ce6373a9cb03f7efbb81d486ce830ec5fd534f2c54afc07213241bb34253543a6d5ef9247e599237d08504ee588c647fc7bc425afc90c0bfc94682c2a7524028d5b148f3cef2b9533ef56ddf52a"}, 0x80) 13:19:13 executing program 2: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xffffffffffffffff]) 13:19:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdb}, "a47e3540f2fd4768c1e3dd5f404c6d8ce9095f3ca3bdca5d8c877adf879d46c3101780ec79ba8b016e13d21890237f1aa405d31025f698ef65b567f79edc6a9faedaf243a6c2cc6c16b3ece22819628cd38675d75ccdb042f22d18d00a3ae3639e0e1e5bc052ff592a75faa46c50105ee95357e9d78d49652a657347914a25e50693ac076afa7a468a7bfff3840a3ec74828851dbc8d60abec35d734c261d8e1e9ce47be69bb320eff391c93f8e4ffe21eebcea44d0c2496117264b876d264f131b350be620155ea22ac7f805cad5855bda4d1d9e007c7f2aae4b0"}, 0xdf) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 13:19:13 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xff', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:13 executing program 3: setgroups(0x9, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x0]) 13:19:13 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:13 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001200)=ANY=[@ANYRES64=0x0, @ANYBLOB="021e9980ffffffff05000000000000000500000000000000a20000000000000005000000000000000010000000000000030000000600000001000000090000000100000000000000000000000000000003000000000000000500000000000000100000000000000000000000000000000000000000000000e0725c2e7963b59e29f9181f03251a9e8e5e75839e252081ab465f9fa1f36c47a903b7422fe2d6d7ae8cc815639d3e29b801147cb36e7bfd29bc311528eb41ca87d0a03ec4a92e9d4eb0c018cf19ee467faa0d47e050efc91a3659db142a7549dfa717"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={r1, r2, "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", "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"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f1f3d718d05425ee0054a8001700"], 0x9) 13:19:13 executing program 2: setgroups(0x3, &(0x7f00000002c0)=[0x0, 0xee00, 0xffffffffffffffff]) [ 2430.835386] Bluetooth: Unexpected continuation frame (len 4) [ 2430.838946] Bluetooth: Unexpected continuation frame (len 27) 13:19:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2430.851701] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2430.851724] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2430.855912] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2430.855932] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2430.857505] Bluetooth: hci2: Dropping invalid advertising data [ 2430.857947] Bluetooth: hci2: Malformed LE Event: 0x02 13:19:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 13:19:13 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279088676d3ec18aa00000000000000"], 0x110) 13:19:13 executing program 3: setgroups(0x8, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0]) 13:19:13 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7c}, "49cabf479ed36134ff1f4579a768540e211c0a38f7877e08a90c666a2d740615f26a5e2f50c523648eb2ce88c2061ce6373a9cb03f7efbb81d486ce830ec5fd534f2c54afc07213241bb34253543a6d5ef9247e599237d08504ee588c647fc7bc425afc90c0bfc94682c2a7524028d5b148f3cef2b9533ef56ddf52a"}, 0x80) 13:19:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:13 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x7, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04810000f4ffffff00"], 0x9) 13:19:13 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2431.021182] Bluetooth: Unexpected continuation frame (len 4) [ 2431.026797] Bluetooth: Unexpected continuation frame (len 27) [ 2431.047306] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2431.047328] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2431.048510] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2431.048527] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:19:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x9) 13:19:25 executing program 2: setgroups(0x2, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff]) 13:19:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:25 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:25 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:25 executing program 3: setgroups(0x7, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) 13:19:25 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:19:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x3}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x30, 0x1}, {0x6}, {0x18}, {0x64}, {0x48, 0x1}, {0x30}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x9c}}, 0x10000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:19:25 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2443.013523] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2443.013571] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2443.020850] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2443.020889] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2443.036215] Bluetooth: Unexpected continuation frame (len 4) [ 2443.037142] Bluetooth: Unexpected continuation frame (len 27) [ 2443.043145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11428 comm=syz-executor.5 13:19:25 executing program 2: setgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) [ 2443.069039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11437 comm=syz-executor.5 13:19:25 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0xa4bf}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r0}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x9, 0x1}, {0x18, 0x1}, {0x12}, {0x36, 0x1}, {0x12, 0x1}, {0x2}, {0x24, 0x1}, {0x48}, {0x36}, {0x9}, {0x2, 0x1}, {0x30}, {0x18, 0x1}, {0xb}, {0x12, 0x1}, {0x3, 0x1}, {0x48}, {0x18, 0x1}, {0x60, 0x1}, {0x6c, 0x1}, {0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdc}, "cdfaf993ffa217e48fc4927e23266daa036f9f744a10280cafc8d900c45ab90a595d030e946e21c6ed258b489c1f26f5928276910605bd51f9a58cd56aef0379ca51c7aea4d00cdb2c5db148c958f68d2ba7441ef29ab22dbb0b28504d86cb6e26fd98a429e4faa8bdcbdaeb04eb9a663272f06d62c914ae8908e72a5a1238877ddcc2da55ef2117e22ed9446f2747c27be4b77271cdfcad5cb21271372623d92d4fbf1255325722c95d6f73fc6e27a143efdf1acb596bdf23cf47ff8a5d006166450af163e828a615334f1bc940c8327e97ca0be328426349a7ee9c"}, 0xe0) [ 2443.128843] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2443.128888] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2443.130879] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2443.130910] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2443.133408] Bluetooth: hci2: Malformed LE Event: 0x02 13:19:36 executing program 3: setgroups(0x6, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) 13:19:36 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:36 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 13:19:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:36 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:19:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2, 0x80000001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:19:36 executing program 2: setgroups(0x0, 0x0) 13:19:36 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2453.729752] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2453.729801] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2453.732110] Bluetooth: hci2: Dropping invalid advertising data [ 2453.742351] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2453.742388] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2453.744566] Bluetooth: hci2: Dropping invalid advertising data [ 2453.773761] Bluetooth: Unexpected continuation frame (len 4) [ 2453.775089] Bluetooth: Unexpected continuation frame (len 27) 13:19:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aa41d279082d766dc809fa44f9d3ec18207b"], 0x110) 13:19:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:36 executing program 3: setgroups(0x5, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff]) 13:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", ""]}, 0x24}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff84) 13:19:36 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x9, 0x80000000, 0xffff, 0x80000000, 0x4, "fb6df6c584acc6b4e71a467e718e78499c7696"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2cb110c5009ff61ef014b73303"], 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0xfffffffffffffd39) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x66}, "f5d3e9d5f1ec2fd2d8c2570a9cba56fb7d41f8babbeb9de256ce8dda0d3074fb7b858d390b574fe980a3fe63fa5f9cd7e96dcef6484765c2c58f569a259558acae673a6ec7ce16a29737402415a816494f00ff0d2345d9b200ef0d4efa70e9f193dce8784e3b"}, 0x6a) 13:19:36 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa9}, @l2cap_cid_signaling={{0xa5}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x1000, 0x4}}, @l2cap_info_rsp={{0xb, 0x92, 0x99}, {0xfff, 0x9, "0ec6bc67492ba1babbcd478827ceb4f25a705785a438bdc42230c71253ab50b1083d373b57c936a88e6543b07d44b600f6910fe2677463293c3cddafee32e11f4fc93b8fc93f5dbfa081625c4040d95cad42d57e557d84adaf1796a145c7cde75f7cc4ea6c644694a9a823d79d8a5f20173c012b20822594d38b70c079806d6e9d4d5ea6c66d5da0a2daf8793b9301d6277d83f742"}}]}}, 0xae) 13:19:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2453.865115] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2453.865158] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2453.866948] Bluetooth: hci2: Dropping invalid advertising data [ 2453.871395] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2453.871431] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2453.874653] Bluetooth: hci2: Dropping invalid advertising data 13:19:36 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd28, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="f924f4d7", @ANYRES16=r3, @ANYBLOB="010000000000000000000a0000000400018004000180"], 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="a1e01903bb493cd8b3bb9060860b733198002c3019a2ddc791532dba7ceb4dd53c96747508a787c33d", @ANYRESHEX=r2], 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0xe, 0x4) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44000) [ 2453.927050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11492 comm=syz-executor.2 [ 2453.936231] Bluetooth: Unexpected continuation frame (len 4) [ 2453.953892] Bluetooth: Unexpected continuation frame (len 27) [ 2453.993162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11496 comm=syz-executor.5 13:19:47 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:19:47 executing program 4: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x10001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) 13:19:47 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:47 executing program 3: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00]) 13:19:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:47 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 13:19:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) 13:19:47 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2465.121011] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2465.121057] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2465.123512] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2465.125845] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2465.125890] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2465.129486] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2465.129522] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2465.131264] Bluetooth: hci2: Malformed LE Event: 0x02 13:19:47 executing program 3: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00]) 13:19:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2465.145959] Bluetooth: Unexpected continuation frame (len 4) [ 2465.150679] Bluetooth: Unexpected continuation frame (len 27) 13:19:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) 13:19:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:59 executing program 3: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xee00]) 13:19:59 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 13:19:59 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x9, 0x20000000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x1000, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) 13:19:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="6bbb6eb60d659e0195d2f27fd38932446a90e22fc13c13bc94130f8db4f51f59627fcf00"/48], 0x9) 13:19:59 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:59 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xff', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2476.729481] Bluetooth: Unexpected continuation frame (len 4) [ 2476.731856] Bluetooth: Unexpected continuation frame (len 27) [ 2476.736901] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2476.736923] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:19:59 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:19:59 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:19:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) 13:19:59 executing program 3: setgroups(0x4, &(0x7f00000002c0)=[0x0, 0xee00, 0xee01, 0xffffffffffffffff]) 13:19:59 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x02', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:19:59 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:19:59 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x7f, 0xc9, 0xc9, 0x40}}}, 0x8) 13:19:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x0, 0x8, 0x5, 0xffffffff, 0x3, 0x100}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x1d, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES64], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "bd4722", 0x1}}}, 0xd) [ 2476.890825] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2476.890853] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:19:59 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2476.911770] Bluetooth: Unexpected continuation frame (len 4) [ 2476.912257] Bluetooth: Unexpected continuation frame (len 27) 13:19:59 executing program 5: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x1d, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', r4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x9) 13:19:59 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) [ 2476.982486] Bluetooth: Unexpected continuation frame (len 4) [ 2476.983670] Bluetooth: Unexpected continuation frame (len 27) [ 2478.941635] Bluetooth: hci2: command 0x0409 tx timeout [ 2480.989643] Bluetooth: hci2: command 0x0409 tx timeout 13:20:11 executing program 3: setgroups(0x3, &(0x7f00000002c0)=[0x0, 0xee00, 0xffffffffffffffff]) 13:20:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) 13:20:11 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:20:11 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) 13:20:11 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcb}, "f52c8741efb4434444f562d38baa1505eb4f134e7acc97349b560a59b6a3f7967f6508155191134908d9fce9a7c09abcb17feacc0b7669099c09259706a606996e4b6968369cdeae962a8786e1d317386edc5d6a6f85205ea7e29fb1abfe0d17a4a6e8d3ee73cefe33ae5acaa32dd480ecba719f2ae8f6b8136eae1b08b6b2131fbb8bc74624ac7440b1221096d3f4902e007296ae607612c7097ff3fddb0e4703205938be8350676cf042206260194d663254170b7116417ef7b76a83add7fedc54919ab826cbee6eb9b9"}, 0xcf) 13:20:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03020000000025d34c0e096defc16d060c0000000400016104be00000000000000f39fb9e38f34d67e88508f4de4ff3b9b9587abfd2cc24c03cdfca91bb13b9346e310daff8e71a0822167129696933e75a950782978f5a5b8fb6747fb7fc2919aef0bb9a72e0409e977ac898027a9c06fd801b8563537f499cffe548ea030141f4d266ef7f0b254d176c29bb35dea377f12c3ca673106a55ad25051d92f267f3942a63d889b001ec2a5472f1af142f4d207564f4b07f08b7be3c91d46d34927b01e9acc81730df968b7ae3640f0c3", @ANYRES32=r0], 0x1c}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x304, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x923}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1cfcf37a9f73eaf148a01018bd6f721ab8d5a10282f4f406302017e244346008"}}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "3caef9fc7cc77303f7b2b2dd84bac5c5f5c7470c285f0c487f1013325ee6c79eb443414224c4b48dd2e977b84d0c2c5e21901e6772518051b1241204d09e11c8a54cc59d98287f99c2fbf5069753db9417ac8818e6b50775212668031a387a9c2f69b85a5267a7aac824c39c21aad567a280d9363e4c237e14e7d5c2f08ecbc68287210558a76a48443c25f0948715b1108c3eaa5b0272cef832"}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd75c}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc3e9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc9f8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1200000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x75ad0ffa}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x8041}, 0x40840) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="ac4b2e88e303d96f"], 0x9) 13:20:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2488.936071] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2488.936120] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2488.947728] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2488.947772] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2488.950026] Bluetooth: hci2: Dropping invalid advertising data [ 2488.950971] Bluetooth: hci2: unknown advertising packet type: 0xbc [ 2488.950997] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2488.978819] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2488.978859] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2488.989117] Bluetooth: Unexpected continuation frame (len 4) 13:20:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a039b0035397d61a6e3c602518900aaaaaa8aaa1110a13f8b41d279082d"], 0x110) [ 2489.004778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11599 comm=syz-executor.5 [ 2489.013761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11599 comm=syz-executor.5 13:20:11 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x3f, 0xc8, 0x3}}}, 0x7) [ 2489.054830] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2489.054873] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2489.057191] Bluetooth: hci2: Dropping invalid advertising data [ 2489.057899] Bluetooth: hci2: Malformed LE Event: 0x02 13:20:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2489.062727] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2489.062761] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2489.064237] Bluetooth: hci2: Dropping invalid advertising data [ 2489.065308] Bluetooth: hci2: Malformed LE Event: 0x02 13:20:11 executing program 3: setgroups(0x2, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff]) 13:20:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) 13:20:11 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) 13:20:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYBLOB="160f6da4aa5c70ff7e022f318bb3f58b1638e8da2a4fbf0b916fdce97e10c9e9840225", @ANYRESOCT], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x79}, "e6ff7dd71ea1ace0f20a9b7a1476c71478466bb906f180755c680ab62240c103600a3318fac750fe7d385cbb5866a63a51dba24f2437981f230f45b6861664d4ee2c8902d04c5f917f605b71896965776df350cb052cd429af9ea8571da8e81d64f05d91e076442cf7ae8ab76cd9795319dca31ba4a7de47a3"}, 0x7d) 13:20:11 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\xff', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:11 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2489.207193] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2489.207232] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2489.214556] Bluetooth: Unexpected continuation frame (len 4) 13:20:24 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:20:24 executing program 3: setgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) 13:20:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r3}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x5c, r3, 0xffffffffffffffff}, {0x20, 0x4, 0x3, 0x800, 0x7, 0x794, 0x81, 0x6}, {0x3, 0xfffffffffffffffd, 0x3, 0x6}, 0xfff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4}, 0xa, @in6=@empty, 0x3501, 0x1, 0x3, 0x8, 0x2, 0x4, 0x100}}, 0xe8) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0d020a0300aa91a2027b66e813226472ef145532f00baaaaaa1110a13f8b41d29e3e82fc5f3b06bf75076e1025d3bb7a1272d43896dc6fa9a7c47cc62b52846d0e081701d2da0833523e2e1050e5f2728728f5cfa7e642690e087ee03f62ab07cb949cd87543e90007334fbec98be7d81800299044bd7070f1d3f7dc3bf5555e3e1a3f9aa4a6cdc899e7f80babe615d61cdb9bf4cee6a04e634aac85b8f3e588fffba7ca717e110f0722705b6799941672566645770c75d19b15"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x30}, @l2cap_cid_signaling={{0x2c}, [@l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x7}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x7, 0x7ff}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x8}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0xe3, 0x5, 0x989b, 0x7}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9, 0xfe00, 0x2, 0x87}}]}}, 0x35) 13:20:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:20:24 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040), 0x6e, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/22, 0x16}, {&(0x7f00000011c0)=""/133, 0x85}], 0x4, &(0x7f00000012c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x2001) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x40, 0xa, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:20:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8b}, "1e04534410b268aad56722e478bebe21142a820a395d245f1f2350319101077ce3aca3cb4d5b7e8799486a1b5c0a272d8256d76115d43422c70f0def7bf1aad061c6b9db9df579bb9fddd6db9d230b488ded53c29a9cfe628bc56bf5a10351d44e9a2844aa3ff14ba3b02e6ffb8d64ece39032f356926fef6594d7c638aaa483608aa1aac0adb397f24190"}, 0x8f) 13:20:24 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:24 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) [ 2502.074818] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2502.074848] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2502.075867] Bluetooth: hci2: Dropping invalid advertising data [ 2502.076270] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2502.080233] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 13:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000a0000000400018004000180"], 0x1c}}, 0x0) fdatasync(r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) [ 2502.104782] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2502.104804] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2502.106526] Bluetooth: hci2: Dropping invalid advertising data [ 2502.106965] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2502.122094] Bluetooth: Unexpected continuation frame (len 4) [ 2502.125162] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2502.125181] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:20:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:20:24 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7f, 0x8}, {0x4, 0x1ff, 0x8, 0x100}}}}, 0x15) 13:20:24 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="e9cfcae1496925fb519c509d3b14258d9e9fffc13cee786a3ccf4922938fa68af110987671a4a8b82cd95d66d01a7573e82e1e7e15b3f3ed"], 0xffffffffffffffdb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xd4, 0xa}, {0x5, 0x3f, 0x8339, 0x7, 0x81}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x401}}}}, 0xf) 13:20:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:20:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:36 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) 13:20:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) 13:20:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r3}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x80, 0x5c, r3, 0xffffffffffffffff}, {0x20, 0x4, 0x3, 0x800, 0x7, 0x794, 0x81, 0x6}, {0x3, 0xfffffffffffffffd, 0x3, 0x6}, 0xfff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4}, 0xa, @in6=@empty, 0x3501, 0x1, 0x3, 0x8, 0x2, 0x4, 0x100}}, 0xe8) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0d020a0300aa91a2027b66e813226472ef145532f00baaaaaa1110a13f8b41d29e3e82fc5f3b06bf75076e1025d3bb7a1272d43896dc6fa9a7c47cc62b52846d0e081701d2da0833523e2e1050e5f2728728f5cfa7e642690e087ee03f62ab07cb949cd87543e90007334fbec98be7d81800299044bd7070f1d3f7dc3bf5555e3e1a3f9aa4a6cdc899e7f80babe615d61cdb9bf4cee6a04e634aac85b8f3e588fffba7ca717e110f0722705b6799941672566645770c75d19b15"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x30}, @l2cap_cid_signaling={{0x2c}, [@l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x7}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x7, 0x7ff}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x8}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0xe3, 0x5, 0x989b, 0x7}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x9, 0xfe00, 0x2, 0x87}}]}}, 0x35) 13:20:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x58, 0x4}, {0x64, 0x8}}}}, 0x11) 13:20:36 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:20:36 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0xffffffffffffffae}, {@any, 0x34}}}, 0xfeca) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "3046416271b444a9879f7db91ca6cbc2b216b0328d6ee9b7c4eea3c3f8ba1bf83958af31bfbe9a455674c7394ab989c8ededccd7d43cfa015f8a365da2c7d40f0dffd3ae782fcbb93c90d659471d37f519b1dda1f7867e84b673f0b79e06401789cc3e31a98d4d5be6"}, 0x6d) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x69}, "d06b622de5e68c650b68bc6c0f858e289ffd0e971feab2e01abba45e5f66d7335b79211c22c0a3c52dbf6935cf7b40abf69d71f3e01b405efda8916acdcf28e09de5ac9c159287989fe8f8716c76548c3bd2ee8cd65e438a274f2aa3de0819116197c60251ea5531e2"}, 0x6d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x76}, "9450b619078b4ef489cc99044b38dca000d47f586e68267f2569bf1fd3fd356ecb2c7ff14fc6ca0e2d55ae05970e85302b3082091094fbebe5b74baefaecddf3d6d4d0e17c6db063a25b201c293c55805ef8d1ece1beb7a2b7f8badaed637fcd6402e38d506dfe624e864f46e5dabd0f66b10a2a5906"}, 0x7a) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc9, @none, 0x1, 0x5c, 0x3f, 0x0, 0x3, 0xfb}}}, 0x14) [ 2513.966178] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2513.966223] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 [ 2513.977361] Bluetooth: Unexpected continuation frame (len 4) [ 2513.978389] Bluetooth: Unexpected continuation frame (len 27) 13:20:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2513.990403] Bluetooth: hci1: unexpected event 0x3e length: 269 > 260 [ 2513.990472] Bluetooth: hci1: unexpected subevent 0x02 length: 268 > 260 [ 2513.992557] Bluetooth: hci1: Dropping invalid advertising data [ 2513.993572] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2513.994394] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2513.994425] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2513.997328] Bluetooth: hci1: link tx timeout [ 2513.998124] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 2513.999105] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 2514.000138] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 10843, name: kworker/u5:3 [ 2514.001193] preempt_count: 0, expected: 0 [ 2514.001717] RCU nest depth: 1, expected: 0 [ 2514.002234] 3 locks held by kworker/u5:3/10843: [ 2514.002818] #0: ffff888017d59938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x99d/0x1770 [ 2514.004107] #1: ffff888041db7d90 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x9d0/0x1770 [ 2514.005462] #2: ffffffff8560c2e0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x171/0x480 [ 2514.006623] CPU: 0 PID: 10843 Comm: kworker/u5:3 Not tainted 6.5.0-rc4-next-20230804 #1 [ 2514.007576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2514.011113] Workqueue: hci1 hci_tx_work [ 2514.011655] Call Trace: [ 2514.011991] [ 2514.012301] dump_stack_lvl+0xc1/0xf0 [ 2514.012830] __might_resched+0x2f9/0x510 [ 2514.013385] __mutex_lock+0x9e/0x1a30 [ 2514.013739] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2514.013875] ? irq_work_queue+0x2d/0x80 [ 2514.013893] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2514.014702] ? vprintk_emit+0x107/0x580 [ 2514.015026] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 2514.015833] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.017520] ? __pfx___mutex_lock+0x10/0x10 [ 2514.018081] ? vprintk+0x82/0x90 [ 2514.018554] ? _printk+0xbf/0x100 [ 2514.019015] ? __pfx__printk+0x10/0x10 [ 2514.019553] ? __pfx_abort_conn_sync+0x10/0x10 [ 2514.020163] hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.020750] ? __pfx_abort_conn_sync+0x10/0x10 [ 2514.021357] hci_cmd_sync_queue+0x7b/0xb0 [ 2514.021915] hci_disconnect+0x1c2/0x450 [ 2514.022451] ? __pfx_hci_disconnect+0x10/0x10 [ 2514.023055] ? __pfx_lock_release+0x10/0x10 [ 2514.023632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2514.024320] __check_timeout+0x2cc/0x480 [ 2514.024883] hci_tx_work+0x7cb/0x1a70 [ 2514.025409] ? pwq_activate_inactive_work+0x298/0x550 [ 2514.026087] ? __pfx_hci_tx_work+0x10/0x10 [ 2514.026661] process_one_work+0xabf/0x1770 [ 2514.027253] ? __pfx_lock_acquire+0x10/0x10 [ 2514.027819] ? __pfx_process_one_work+0x10/0x10 [ 2514.028444] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2514.029098] worker_thread+0x64f/0x12a0 [ 2514.029658] ? __pfx_worker_thread+0x10/0x10 [ 2514.030260] kthread+0x33f/0x440 [ 2514.030722] ? __pfx_kthread+0x10/0x10 [ 2514.031247] ret_from_fork+0x2f/0x70 [ 2514.031743] ? __pfx_kthread+0x10/0x10 [ 2514.032255] ret_from_fork_asm+0x1b/0x30 [ 2514.032818] [ 2514.034206] [ 2514.034446] ============================= [ 2514.034966] [ BUG: Invalid wait context ] [ 2514.035476] 6.5.0-rc4-next-20230804 #1 Tainted: G W [ 2514.036265] ----------------------------- [ 2514.036794] kworker/u5:3/10843 is trying to lock: [ 2514.037411] ffff88803dae09b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.038608] other info that might help us debug this: [ 2514.039252] context-{4:4} [ 2514.039611] 3 locks held by kworker/u5:3/10843: [ 2514.040204] #0: ffff888017d59938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x99d/0x1770 [ 2514.041455] #1: ffff888041db7d90 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x9d0/0x1770 [ 2514.042816] #2: ffffffff8560c2e0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x171/0x480 [ 2514.043944] stack backtrace: [ 2514.044333] CPU: 0 PID: 10843 Comm: kworker/u5:3 Tainted: G W 6.5.0-rc4-next-20230804 #1 [ 2514.045509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2514.046539] Workqueue: hci1 hci_tx_work [ 2514.047063] Call Trace: [ 2514.047393] [ 2514.047689] dump_stack_lvl+0x91/0xf0 [ 2514.048190] __lock_acquire+0x1605/0x6340 [ 2514.048753] ? lock_downgrade+0x6a3/0x6d0 [ 2514.049295] ? __pfx___lock_acquire+0x10/0x10 [ 2514.049882] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2514.050555] ? __schedule+0x1ec1/0x2b00 [ 2514.051080] ? __schedule+0x1ec1/0x2b00 [ 2514.051608] lock_acquire+0x19a/0x4c0 [ 2514.052109] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.052714] ? __pfx_lock_acquire+0x10/0x10 [ 2514.053275] ? mark_lock.part.0+0xef/0x2f50 [ 2514.053836] ? dump_stack_lvl+0xda/0xf0 [ 2514.054358] ? dump_stack_lvl+0xdc/0xf0 [ 2514.054878] __mutex_lock+0x12a/0x1a30 [ 2514.055382] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.055981] ? irq_work_queue+0x2d/0x80 [ 2514.056496] ? vprintk_emit+0x107/0x580 [ 2514.057042] ? hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.057638] ? __pfx___mutex_lock+0x10/0x10 [ 2514.058198] ? vprintk+0x82/0x90 [ 2514.058662] ? _printk+0xbf/0x100 [ 2514.059119] ? __pfx__printk+0x10/0x10 [ 2514.059638] ? __pfx_abort_conn_sync+0x10/0x10 [ 2514.060242] hci_cmd_sync_submit+0x3b/0x2d0 [ 2514.060820] ? __pfx_abort_conn_sync+0x10/0x10 [ 2514.061421] hci_cmd_sync_queue+0x7b/0xb0 [ 2514.061965] hci_disconnect+0x1c2/0x450 [ 2514.062497] ? __pfx_hci_disconnect+0x10/0x10 [ 2514.063088] ? __pfx_lock_release+0x10/0x10 [ 2514.063648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2514.064318] __check_timeout+0x2cc/0x480 [ 2514.064875] hci_tx_work+0x7cb/0x1a70 [ 2514.065384] ? pwq_activate_inactive_work+0x298/0x550 [ 2514.066053] ? __pfx_hci_tx_work+0x10/0x10 [ 2514.066607] process_one_work+0xabf/0x1770 [ 2514.067163] ? __pfx_lock_acquire+0x10/0x10 [ 2514.067719] ? __pfx_process_one_work+0x10/0x10 [ 2514.068329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2514.068951] worker_thread+0x64f/0x12a0 [ 2514.069483] ? __pfx_worker_thread+0x10/0x10 [ 2514.070075] kthread+0x33f/0x440 [ 2514.070513] ? __pfx_kthread+0x10/0x10 [ 2514.071014] ret_from_fork+0x2f/0x70 [ 2514.071500] ? __pfx_kthread+0x10/0x10 [ 2514.072001] ret_from_fork_asm+0x1b/0x30 [ 2514.072528] 13:20:36 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@none, 0x61, 0x8, '\x00', 0x6, 0x3a}, {@any, 0x1f, 0x6, "e49f36", 0x3746, 0x80}]}}}, 0x4a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "87e98827b7a5d784582f671a25ff73c08486c2c43922226d139186629256396540035e5b73b009ae090de0dff8667136e2e18b4119984e8e608832d89a3318dfe970f8b8e24c8a9af62d33f8d7f0c1b727b9efc790abc2b7cbb207398404ae6ce65f0e4fc067cdf226fa2c4518e3341e5bced43d20"}, 0x79) 13:20:36 executing program 3: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="e9cfcae1496925fb519c509d3b14258d9e9fffc13cee786a3ccf4922938fa68af110987671a4a8b82cd95d66d01a7573e82e1e7e15b3f3ed"], 0xffffffffffffffdb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xd4, 0xa}, {0x5, 0x3f, 0x8339, 0x7, 0x81}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x401}}}}, 0xf) 13:20:36 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) 13:20:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) 13:20:36 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa11eda03f0fc5c2398b77cdb10918207bb1ce910101aa506837df65df5c312d21ab375556343ce9c95a22b335bab5a7f94bb4600e"], 0x110) 13:20:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) [ 2514.103554] Bluetooth: hci4: unexpected event 0x3e length: 269 > 260 [ 2514.103578] Bluetooth: hci4: unexpected subevent 0x02 length: 268 > 260 13:20:36 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2514.125694] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2514.125716] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2514.127021] Bluetooth: hci2: Dropping invalid advertising data [ 2514.127438] Bluetooth: hci2: Malformed LE Event: 0x02 13:20:36 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @none, 0x2, 0x6, 0x7, 0x9, 0x7, 0x3}}}, 0x14) [ 2514.139050] Bluetooth: Unexpected continuation frame (len 4) [ 2514.141147] Bluetooth: Unexpected continuation frame (len 27) [ 2514.142088] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2514.142106] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2514.143043] Bluetooth: hci2: Dropping invalid advertising data [ 2514.143451] Bluetooth: hci2: Malformed LE Event: 0x02 13:20:36 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) [ 2516.125646] Bluetooth: hci1: command 0x0406 tx timeout 13:20:45 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\xff', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) 13:20:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003280)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000032c0)={0x0, 0x0, 0x0}, &(0x7f0000003300)=0xc) sendmsg$netlink(r0, &(0x7f00000033c0)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc, &(0x7f00000030c0)=[{&(0x7f00000002c0)={0xd0, 0x41, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0x5a, 0x81, 0x0, 0x0, @binary="c0302aab52ecd4774ab374411d91ad24a4eefcd030e0bbf2ca082ac9632be4987bd26652ad3ad66a5e43ecf5df4003ffb7890d43ce6ff2b323152fa4242798852d1516c7b60f169f3cf962f8fc503812abb02a615728"}, @nested={0x61, 0x6, 0x0, 0x1, [@generic="d21423533b2005fcc6d9dc8698919513d95769e59d6ecf3fe7ca8b1309", @generic="21bff6bd692238d3e72afc91f7cba3957ebb453bc6e27ca29d39ab97f54d8778b45f61b7077e68088f730072", @generic="fd2edce41754aae8bbdc5d9dd562a83ce4a60ac3"]}]}, 0xd0}, {&(0x7f00000005c0)={0x1b4, 0x27, 0x400, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x9, 0x0, 0x0, @pid}, @nested={0x13b, 0x78, 0x0, 0x1, [@generic="ccf9bf38efda5127b4f1464e51d101f05bbd85c0f14501df425c59236e7f9f2bcba45dc39b1b3b82f546761d4e931c20278b1a91af604c7610d900f9dabf4bd2ea94121370ba537bc049dbdeadfa7de5c6ae38be1c16e40cca96a575533fb8a0b363f52836938f75d32fd3db2ab345dee64f522804b9867b3e14daaafcd087cdc24bbc4ef5858bf3d70230ed22db5ab2c3b37ea6b1343e9ae6cc6195f82ef8", @typed={0x97, 0x36, 0x0, 0x0, @binary="daf6ed83e598369e82399d8347affe05c4a085fefc4643f71bdf8d5c60bced55c695bac9174747c9bb766201fb425d156e9db4c34f288b3983bc5b83c88ad857f6c02f663fe514b26dbc301258de27ff073965a720338a171f7003be4be00fabbc7c3b9ba20a7e001f6ac40c1cb018da58942760411508cf0194b27a0cb122065eedcacb4cda161bb7a31e3078a0e63af46c63"}]}, @generic="8fd24ee015e5a984dc1f82b29a6537ae69b989200c91caec4e3e54f935e348081879a523fc303326c7cdf52a2985a61bc3e201d4db1fd27880353d47f86b19059338f2270a4b3a90cbde4246b0363d83c43ef0f9af054b806c86c839fb80"]}, 0x1b4}, {&(0x7f0000000780)={0x27f8, 0x18, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@generic="8034286196ba0f405298719fb2430498a3ba17025c8db3f530e8490bf0299b62b2baf0abbb090928f8b72980cafaf3", @typed={0x8, 0x5a, 0x0, 0x0, @fd=r2}, @nested={0x1004, 0x96, 0x0, 0x1, [@generic="c01e2503eb6243ca43d12ed5e8a62004d7f4c165dc7ffaf6248c5b317a3c77b266343b8009d2204cb09ffb3e91e238a684d4d00638637e01fd211d83e1c7d3a9432e16d8bc004b4739a4852e0f32fa4850d6debba174b75f635a00d771dd92bb470bc315eb7be4274b74d3c9927ccf5ef26c2ab9c644c0291009581e226f3cf29f0c4fcff759b78f166d39ec01ca970c7b60f056b66a8ab9440d19cfa7a98331471abf865512658f48d34bf29e7da2ed32dab22d1fea552dc966c95b329702a58a9bfeb00f29b5fb723c3b41b7dfc8205abc5b01388a2496921a3249b08e4fe3acfd8a96dbd0a04ca1bc0d51013821b748c216c5d640e15c10528a4b4814357143780128e6b6c5cca5fc03299b3747e068041541e279bea4873026f46aa370374b1ebd7cdb3f81f53881a2cace2fffc7dbf26dbe3c6455e8d688f6f2fec048788b99873ec36976d6e0252025bd466ff3ddce463548c0be9628484f41ab4bce9c52cfd6fe256581d3107b35586c983ed4d14fdbc4a99ef5f0d96d7b31b65c471b380988e25ce47539c9f6444d8a85e4dd519695981e91b84762654d4fd1ab4e732bfd128bbcee19f373cd2e26607195d16f9b14f56a9d1b7d08eef74822d1a469bb2805dcb3c6051810cb3ba57b050f83dac8e3f71b292f49346463468df27093ff9d030c38760ee8d48313e24ffc0ebb69743686165d4ddef31e064b3a4fb797744dac6d8b8e361852915a6d070fb8811ecb83715767eaed2d3cb71369eed0b87f1a471ad98634d5a6e4bed9e99b8bb9433b4759df8df971a1f38aacf2c6e62848a5ed6143b9e0f1df47db1ea48a6b8adb3046a07f475e74d44520d26da1692f1203d132988b8b0168571d38e8cb4fa5911434b37e1f5ba5606bacb094e44aa5090ccfe597c9eba590d4ab0c14ef02ccf00810c046dae6725ae67a25145d2f280c686e51986ad9f1ebe7935c82cbf49f4a0ab8b4ff734e7c4d73a49f04f32ddddc33b100704ec566f1dcb789c4f22f97d6e6e1cb2073ef152269e95d14b7f8af8f2a97da51d3b845b66d50651024ffebf4f0f4ba76c23052f6ee52bb8bd22d55d629fb8b987bec96b23f11a4c8dd3cea72277acb57e1bb007f1cec8d0509b4431d1c7c939b0d625c2a697d6ff3320f2b75db1c80a5fd1cc6efd92e6e67397e38b6cdd2222980da9b2eae448ce4147e2eeb5e6bc3a12415f14369922332d9fcaf02dd582d5645130471d86fbb0ab581d1332744b4ab562f12328e4c88db58029ac34f9010f2ff15942703357adf94ab259777cb0c49ecb1c12e87c7aacd5d688e657747d32abcb1c7987b0c376c83510df7529eb612570102393b293ea75068476e2008dd1981475ef883cc113742c8fe2db8f85a9e653f9ed46c0e6ee60b0e67a05ec83db096acb90c66b674e2f994494524c3b66c091b1baa03bc21115f982ae9067bb0a890b5a31f2415b22d21a39df1eb1e6529b3f8f584aa8734756c47f81277032d925df9cccbbac16892158d8f0b001497bcca5696c18eaf0a6164c50ec978e754f7b3e6f14903bb7d6a76f5e8aced53e880775fcdb934f97fdb9cabf27b97ccf751d83c68829ed79a33eb5b1a7a864fb0944132414028ecd9aadb6d00ec7b421e3adf2bd6f7f1673624671146d60aa8709eec71b688b1af2841c5bdf3cb84d80ec62ade910909a56b3539e744bfac18c61b8831850cb84e79d8d5b36310c88436429d59695957741109f6f5f95ba3d487fd7526a8c9a43360f582e8d10afd9d8f23890bcf738079225ee9d8fe70b01f0f18960907a0868ccbd21221a1b1b4765c2045fb07023e603eed05fee235a2bb7b24f70d0316c4c419a65aff80d0a2eb8eb4ef1aead13c344c26a5031ddef34224a181721c35b518d51f8ac41cbaa3da666b75100c0312f4c02e6050bafebd325e162705dce09bbf475098cccb12a778ec646c0e110ccad9c25c18861e1af66324d80dd8bc846f2bdca3e82f7837f61aebbdf79d5daabd98e00bb906e3db08fce71b57a61baf2660cf6fa39fc813a92dd2f07887a065cd3e933cbff4a85237477a32db1b22fb9b2dd74532e8ea2118d96e0b2f8da25e7b74582e59a7e78b557d308c71b08cf7a5e04f6a0c91b948ecb3c686120a4eabff1f12f5a1a88048d60ae77cd54b3a563a2a467fc6773d76b78449ccc95da182acbdf94e241f18f34f6a88b4224734422c7c088e554c6c033e7fd4fc6b550586e2d5fb5c6f582c39c8fc8af4f38dee57dfaa1a58340ca47ca731f2bb4e3b7f83ec2afaceb4d30a417d5a466f8690ba10c034051fc68b39c1796ddbeeccca2501f54eec69f335bdb6300da2a05c6293bc94fe4e2fa41099951e24f581d2daa37746d7bef131783a794c8ed7b6138d5feb5ac8fa44d0c7cf5cc25cf39a0249f01f6ba3cb45648b4bb56791ad4a4f4541d45f4c1930e8b270401f2e99526f439ec0d23561c3a04c637170c86eaf3e70cdcb4a541e339c599362cd73b810b848a77d5fdc04b77c5268c3f05c51b3f8c992ff5a2760d7b294740421e4d0115a665444fba5607f660a37e98e7ea0d2fd4f6a59d02596cf028730e17885ac250d8ba18cb73e86ff844fa80fd7c57d4a23131faab943cb7e44406329d657201300c3006ed001080430337d559bb64a89c455db0510b7fc0df05584beb7da7b8c6a8e93f871fe210a1da8c0db7cf591d2fbcfe1eac50ef54768740560a2bfc192ba4733cff0e025f332c1ee8dd742c677f4ee0f598f1bf748b64d32de53b2fa4cc6209171df1bf65a948bc68c8e20721aa0df298bdeb3f36312309df32e54f5195861520bad21a931b706cc66a34306a72a2cc80eecafd949f219845a8b5c85654d9b1b8b642b5fd73a80359b5eb58f10b7d3f8cede2e4ba756446611f1c24cc93a992e5f3eee6420cc5be7ab4c9b17ab2d7d61f072d3eb9267512b4fc3fd8acf5fa0ade6ce2954ef76e913855ea9111ed69a83476c06a893913d9794c29e4b8f5471bf1ec9cc396c26c5893933bed3f55f3b193b991681ce7c6da935dae48214e665d787c30906202d0849d429408e9dd39fd1bf75798d77578aacfe5b51f1fd280156c4bfc16a649f94adce5d2cb4b41fa89e137a0a385a00d73d95bfc9fd14b27371fc838aeaab1cc18eb0389a2280dd813151a5e43abde6ce4c40fa6a0f3ee4c6e01edacb1ce799cfe6ce00d1f4527ceb1de60afc504d42509bea8b99c4d881cea30ee5aaa10ac12d92d0e8621299f3ad8676535e6f309f0adcf7f7514f9159a7f36472a974b033a2facea39e0c9c0f7b6d8eab571e4cd23c9b07d9e6ed87efcc3d3426d3978bdecbc29c1732adc8402c6cf83aec5df149094be1f817bac9667e18e22371bd24e5f90187f013514459e6711a462aa3eb019ac9aa1e03d02e5cb47f15e1f995e8d9b35738b47ab7806351bfa8ad59d808a85deac259d5669c28752c88fdfc7912c6ff9983c3d89b151148ab0f088b3fafa503be83267d40b57720166e14820f688d7e2cd94c0a52c2698d7881b37f98db01a080468ab3278d0e7079a24fc7ef5866a6a9c8358c3d0b0ec5b0a62cd012845b9f30888ec263ae9aafba0dc730f0830f31de732d5110b8c79027332addf25858f40ce683e2afd8b9841e66914ab904bb66976b186a6cf0708233d217660c86e1d196282299b865fd62871bb05589d6529ea23f4ae08d17b3b8da2ae3001c8aa563254ef99c98fb645cb8d1239ac497727fa5aa968727719d5f4cf6106f1914684c0bf24a3ddd8cdd8746af08aa4b6f47e945164636affdabbda5f1e8cc8bfd3905021b363e4a162011378dd102494ff1bce3496c6bf33c36abbc998ea58f0a4f5e935c220f68f086d06775db41f766742e3cf241f9739ff0915bb08595518bd636b306bece1e392741143c8bb9a0c5e44b75a9861850fb2cdf2fef1bdd3e47e212a505192789650c648970689734b219096d8db54376835638c23418ff8af05a4dc79e3d2b65c22b398dabbe15890e19e7a44481a5638c59ead5c34bcb079fd308a691d628a950b651a00d9d334da556c79f96fa16ec34501b48921801a3cc27ee892ed80fb90ee657c6c0d4850bdeb737330eb00b358ba8ead20c2f93cb64a14f769dfce619801890c3be9f851f4cb6631aae9057d9ec084b16f10727f61dabe2f01ffc33bd9fcae9f2ccc480586ac8fca2194ee3068a438d0a72792ef493583d9ddb6026345aba4e8edf0a4cc9750450e684707454c1d7f8eaada07f2cf8013ed95bf61128cf5470a63ca91b7d2a3e2e6f6780754e828be6e9c19564c24923ce0ece7eedb4797059682deb94ef05467c9669ddb53c9aadb87491fba847dab5d78c930bf5f8eea36da7d7b72768186f872713a890edcf4fa4bb402b56f08baf992d2ff7a83272fcd38d258b3a236e467cd0dc1d1333b81667f8cddeb0b8a94486502e585dc486e40b2810c30884b3fd0562b67fe8c8809f0e8bf19dc6dd64d2c31eb6f05fe3ef10c7506356e89887ca38ba8f0768d78a024b63da24ab0b001e4c8b3c4849bdd74f9067c64790fd49bb4e223aff8a4b7157a413d5cde10afdcdee4a9bb6e6df6be6fb5e2e0c3ec66612fde834638897d2b906449e4e246032c10f4330c14e0032491da7f358ebef73e147542092a50fd48dfa618f093519b730404aa5a6cb8b6f94c274bbc3dfb3b30506177a397229eb252cf2f6d37b9f3e63dad8b87946a5c36b142d50d3f20fbc09f2c9ce8d7e95e980ff1d2c6d09b33f4e228de5e1c6ca141163e046facb1bd4d62443b44848a35f522cc2a802ca820680ec82ea03a779401ca0d760641362d1b2b2130671cfe11bbea640410f4df9df01c4a39fe1e5abf4ba2cb9490626d5f64b77089f5b54eb3ddae58b9b2f5e876b8f71ca90b7b1b98edca359000e725161c8bee38653347d0df2972280c7ea5d2438457cfb4ab89831c91e65e75bd8c0c23501fcfaa6ec728755b9088dc2d8a267b5899ae41b7c08b0637dc5e3246e701795dcbed4889b3b097e5f0faf1a4f089b56d16651535045dabd7fc62610619fe1b3d25a9889ad55cffc9e35ede9b7730cf0a3e278a16ecde439b30bfd439df0a38f495f492dcd077dbb56c2cecfffeb10fae24ec0e0b54dea59273cc747eb34f16ebe8a0e5a304855fbfb2576abbc143fa2e4f3c2a1fdc113b8ba5aae3df2cfc982175560a03f4126f89032d309aced17a93f451efb69be8489667ef8697865696728d84c2fceb4fa98756de49ff6b1859078a600478ec7e810670b16d653cccde8604de8a4eb69cff5d47037b1c61b96e819ec3ce418ba61191ba7e5894c9e5a2a9afbfce413393840540f02ae383d928653b8ed5a8adc834fa61c5e765a5f6da07019a24df2070bfbc658e98f2f6f8f642118061d45738a99e526563f1899c4e9790c66db9fc29c7ed15593081a5f6dd0fd6d117f68183ccb5bcd422caf1d850ad9d74500394087eb7e525a21a3cfb1b3d37a21972e00509a63491ab9bf73cc574f02e065f089dae4bab645fc60a26432b86330dae69fdd186fb6e8565e6f1a45ba5f2c34cbe8e640abb12d29dd3133a35bd0cea64603ad3b26e005c61868f60a730ed39d91523e84a792ec011cb7b48cf50dba12f9e3c65e79bc67b0bbcb88a9d32dee48ebed1915d3100ee059594db96a4a518f1d2b866fcd35d54a1398ce48fb205e0cc53379085a5cb733822c9f1fce39dce18f07f365f99e1529842f880a8ef3144146c7b769da424bbdfec6eede6a01d1540680e3af54c7665be091384d48a86c3b9b536521bc66ed419c3dd1096674"]}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@mcast1}, @generic="8f1ace17d30fa5bdf2c208e9a304b06276c892bb658e72a703bcd2377eb0aa12646ac25aca9ebda15630abca4759aae1c7a79c4256368c51ecde2fb59c7b4d5da0a0c96b60bd2832019a02af229a4ca8f4ca1981c07d03a4fd9cadc3be03fef4b005b12863d95833ee89ea7bac65c06edad7360d2572160467ea5b4fdec183f06723c5fa6e6d9d95cfec09ffa6d46f814e00b022db650fcaeb91d1442316a1a03e82372b410d8e1a1cc7cb4abde08752c63099ec93c7f71a69ab9689a068d2dd3d0cdb09c001b08e3ba2082fd81e74f0199f89ccaf4f2c53a5bcbdd575b71f8b782d7777795239858c", @nested={0x18, 0x66, 0x0, 0x1, [@typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@private1}]}, @generic="3f1412315fea793cb84328470be5c914e5695c99f1a638211f87a679c549305cd164d601527d03874444aa247cf6f3474918af3ee9e1060a1254a39ed054f66c80f8498f8950be4f7539946d323adb899aa0eca6ca989acb3494f8243b2b9dfe5e224c19ae6f787d80b2dc3899de12c55f661c056b", @nested={0x1db, 0x59, 0x0, 0x1, [@generic="684d786b46c693df4028cdc9ca9ad4f03f51869cab2b31e4c63635de7131947e804af7a66656ea2d35b41b61b7ad1a09ce64727354e2e74e", @generic="b12d638e5ce71925398ef9d763b3942f9fd7268f2244ab2f82d172f8d786199a7de2c3e8434543edf5d68bc645bf7572979151b87005c7de81d672667f1637a6e244e8714c110a7edf10eb183265f2dc3bfa9a6491de19575def5db1681a2245fa9b1165adc33930c3f5d237706f682f12b5609d957e8ecbc442efbad490aab80143f0c77e022dd15fabb1be9b79de4cb79bc245646154e1d8aa5868915e1af787303a237e8e4b02626f5c530059a73cfbe10e631caf0834b18370c9431b3d54336944a85a1f0a47e3ad087dd0d1cc2fc2250e03", @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x7}, @generic="7e3ea8ab187f4e078de80aeaa228c66f8ed34c4b8af00dc08e8c3c9c88b36d1d6a098c5d53f445d1502afe8ce02636f7b32d7d828194d33d95e4850eb3070c5ae6e32b770db708534d908e5f5d9c75508d1aa4b16f5ef9460e520f8dda7211b5e3e8bcecebf5d933158117de03c93db0520a71fc792960b74776eab659e7db64e3", @typed={0x8, 0x10, 0x0, 0x0, @u32=0x100}, @generic="e62340950d126b9b9dd85fcc143948550c2284a197a05476388479738640c3239420"]}, @nested={0x1439, 0x29, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x4}, @generic="0e87c661d0295c8bf273ce4830c5b3129025746aff171c7a841ffd453469ca5fa62d31d68c084056e5977731c4130290e1865aed165e181d5275ce97ed172495ff01e3c681e9fd68882d8c943f87c52530eb96d66a8a27c11bba96d65053f032346e9e19f49960d165877d50d8a8b3665a0a727455b6a3328756528d4a82623becbc6faf483b7a666adac2006e8799bdd6811bc07f731c375a2bda1d76b5c34fa86d63b5583e6e260de8dfd5dbe3f550af7a51c458ad9e9d2c1e51d89b34b7b2092635407f0d4f1b63d2f5c9072c64a2fd5ae77852fadde7aee3deac24246187711460dd923ab907169ed0d1759e748caf431a81fd14d2", @typed={0x1004, 0x2, 0x0, 0x0, @binary="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"}, @generic="d23022be1f4356a4b0b895afb5b2e7fa8c0ce6428247ef31238f1c7cbbe18f399656d7b001968c8915efcc34cadcde8527e832e47bd53ce56c0a8720df90e5c068229851656e92c995946008895127d6416b3b0eec7a74603fc7fac9d81d6e7fb27ea58660e8866da3552a1c60b0ded15aef3e0411766b5cfda47dd218a159fc629d3ded1c0c25b4aaddc98e7b53a20980a281ac0df875f2b967a485f59f175548b174c174913ed9e27164d2c456e605fddbb620ed3ca3705e6617096ed0ba2f035a", @generic="7afe3c0c9d461ea7d292bfa994f65acf7c0dbd207f8197f0fc2332f66dfe92e50d8471f82962408a726770c6257e88ce1649af06544a906b4dd20fdb4ed575ce01b91a30e87e476aba29145a59376b10cf170c0041f413926abd9644e37c6fa874c1dc6f305c4ec94ee0a5f5f3e67279d4a310e559c28e539a3c053aea96f8f79c2aaf3f9571a470b8d7147a39849397fa626c4ef30eb559ee304a003faf746aaf778f1a073eac21d8204ec98d4c471e9f9545cbd63e30507535fb18f9f9e57d274760c21369b36eb2aaebb532c2aeafcf4a757d541b9d3a4ff07017c94baf9f55c70257ce332fe0ef5e73ea79a28ac49100370e8289", @typed={0xae, 0x29, 0x0, 0x0, @binary="8a353978991744010b1239cd776af1d74e3bd74d4d01235a37c6cd0a15b80df5447724fb28974991c4127a9c091eb5a21e22f6f13b514e3b4bbbe07d4324d11ee2a17796ae3377bca2f02c4dcadf38c69aa3a990f6497ef35272f15eb5646bc02a4764856d8e3572da6e2c993d0987681aeee457b73df964f102a9d00ee75ca56b0c67503d43b00ef87210df32c0f4b6dec06744cba5da06fb7aaa449cf8a3d6ed9f1325e3a2c46840e9"}, @generic="5ae19a1f3683f98db012b7a4a03e4ddeaa28aa35980a090c2ffa5de44add75bbba0db36b493449445473120d4e84281d4198df09de5ca5ef622631dc53d7382914b606c952980b4d4f6e11f1900002734bffa38d399eeac9de9c9c80dc89572c15e732ddf56b2fe65b0774d70b6587fdfd02e5b517dc7c76fd40466f8bc2c6056b36318ca0ae8ce8a8195b2b10cb9246e0f70568550d15a42250b9bc3363110ec152ffdeadb8a24877d2f4877812d5b3c4d7af46d614f15185121c", @generic="34e7cee867e407057f31960d659a97"]}, @typed={0x8, 0x60, 0x0, 0x0, @u32=0x5}]}, 0x27f8}, {&(0x7f0000002f80)={0x108, 0x11, 0x400, 0x70bd2d, 0x25dfdbff, "", [@typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xe2, 0x60, 0x0, 0x1, [@generic="8a13b82281bb0e04f7265ea3483434477b43d412e6694c49ddeea4011b68ed4c92e11c2380aee7d31793b5941fac26708cc742e7a0a3d00e07feb9e46d9e389e3dd81ea20890ca79cc69ef5fffd9b5957ac2067e7376a94647a8dae19046bda799b914564872803ad1b516cb666d580fbb3a611ccd6d8effbfcf8f7b471c04d4cd9a902446180687f16e0ddfe6b4ee3e02e90e9c43fbcb99f6f2b9ad5ab1a06cf269e923ef9c25fd47f9", @typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x2a, 0x0, 0x0, @fd}, @generic="66b1c1ee128a51ef0e55173eed6e29991988e799", @typed={0xc, 0xc, 0x0, 0x0, @u64=0x1000}]}]}, 0x108}], 0x4, &(0x7f0000003340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x70, 0x80}, 0x800) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYBLOB="73fb3877e59061a33aaae8d5525d80a0b83497b78f68d541c354dbcce2d1925f13148e9e273c136014aee6b8746292ca137c15647937eb8252999612af495d37eca4cf92724578e34ec947a8d526ab9c22e43b395af23261c78b4e1acc9563fd0d54da169ea6df0429083c7af2b62a4f956e0a1ae89093aea25744d6277082e48ab614495d3e52d257959adc1782a90036f2daf504d7c7a25a98f58db33173c4862bd2f405dd1481c30b9e5818fd524fb41c310d6e64ebd44573b5552e27b9b54939b8619c312382698678bda8f745cb9cf33ede225ef74a6f6f5351b2dfb5d8060f05a2942db82b2cebcd46ae90cab3b9f11f4649d768", @ANYRES64, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES16, @ANYRESDEC], 0x9) syz_emit_vhci(&(0x7f0000003100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0xffff}}}}, 0xf) 13:20:45 executing program 3: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="e9cfcae1496925fb519c509d3b14258d9e9fffc13cee786a3ccf4922938fa68af110987671a4a8b82cd95d66d01a7573e82e1e7e15b3f3ed"], 0xffffffffffffffdb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xd4, 0xa}, {0x5, 0x3f, 0x8339, 0x7, 0x81}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x401}}}}, 0xf) 13:20:45 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0d020a0300aaaaaaaaaa1110a13f8b41d279082d76d3ec18207bb1ce910101aa"], 0x110) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 13:20:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) 13:20:45 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) 13:20:45 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:45 executing program 2: syz_emit_vhci(0x0, 0x0) [ 2522.848982] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2522.849025] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 [ 2522.851373] Bluetooth: hci2: unexpected event 0x3e length: 269 > 260 [ 2522.851408] Bluetooth: hci2: unexpected subevent 0x02 length: 268 > 260 13:20:45 executing program 2: syz_emit_vhci(0x0, 0x0) [ 2522.880822] Bluetooth: Unexpected continuation frame (len 4) 13:20:45 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000640)='/.\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) [ 2522.886310] Bluetooth: Unexpected continuation frame (len 27) 13:20:45 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_emit_vhci(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)='*$[\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)='\'\x00', &(0x7f0000000640)='/.\x00', &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) fsopen(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xdb4, 0x9}}, @l2cap_conn_req={{0x2, 0x7, 0x4}, {0x200, 0x6}}]}}, 0x1f) 13:20:45 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x7, 0xc8, 0x6}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_cfm={{0x10, 0xca, 0x4}, {0x1, 0x9}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xc600, 0x9}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x0, 0x1000}}]}}, 0x20) 13:20:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="b65030bfa9ee2e8dffbc94d0f7c75ff09daac1a22f5bd1c3aec5c40a6741352d15b57812ddde06bddc3ed240ce53a3de03fb9c572364c03313f5d5c4f50d3cf318d21f7ca1b2757b8801432928dc8ed00c543349a24470e2484184904d65eba473a41bc5e2c65097d1a7751381ecf07037725bba6cbf5048ed64dfc17cfd9c53d74c9f5c5f8c12fe822280c60a27b4ba45f79c2cd7b6536abc95140c05573a9c1c5dd52d80a235407285bb7cff9e7e298587aa47f83e7e64fc0375ae8e2595c9d1de455f551b9f0aefd76d243d51b4168695038d9ae9cfa1843f18f99f3c809e662e7f22e17e5acb2645f00e10d29c29d2498d444936cf11f3e321b15161c9d0d3dfadae0f398b0e6484f6766c5fd7440c230933ecd467fd408464fcb4d8d19c2abb3d07a4abdf81551898e60c001c004c00000000000000159459399616bac8f0be3923ddcf58c83bbcd138e72dd26adf7aec49fea545c0427ea1841fd54782cee0968b583cd19f645cb81f61211fe1c489d8c3823d7baf4637412f4f3f8a00e10f3900aea197d48cc1c9fc000c003500010000000100000016eb2a1d5243af7142fff3688375af8c5026c76baec522ec8a1583efd694277f789566700a07b5aa68da9f306b4edff7c5d07462ee252aa6a4813dd027998ad5cc757e31932e67a80979b7db1421b8954614001f00fe8000000000000000000000000000bb000000"], 0x4d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x64, 0x0, 0x1, 0x1f, 0x0, 0x553bbde2, 0x808, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x4}, 0x101, 0x990, 0x7, 0x0, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'\x00', 0x0}) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x71, r9}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a0000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000300020000004c000180140002007665746d3000000000000000000000001400020073797a6b616c6c657230000000000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000200000018000180140002007465616d5f736c6176655f3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24004}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0xfffffffffffffe25) 13:20:45 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x6, 0x1, 0x3, 0x0, 0xd430, 0x6}, &(0x7f0000000080)=0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x9) 13:20:45 executing program 3: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="e9cfcae1496925fb519c509d3b14258d9e9fffc13cee786a3ccf4922938fa68af110987671a4a8b82cd95d66d01a7573e82e1e7e15b3f3ed"], 0xffffffffffffffdb) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xd4, 0xa}, {0x5, 0x3f, 0x8339, 0x7, 0x81}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x401}}}}, 0xf) [ 2522.967298] Bluetooth: Unexpected continuation frame (len 27) 13:20:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000002c0)=')\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, &(0x7f0000000440)='.\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='^\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, &(0x7f0000000680)='%)\xbd^\x00', &(0x7f00000006c0)='-{/\x00', &(0x7f0000000700)=' ,\'-\x00'], 0x1000) VM DIAGNOSIS: 13:20:36 Registers: info registers vcpu 0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82568375 RDI=ffffffff87ef1de0 RBP=ffffffff87ef1da0 RSP=ffff888041db7498 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001 R12=0000000000000039 R13=ffffffff87ef1da0 R14=0000000000000010 R15=ffffffff82568360 RIP=ffffffff825683cd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f27aea6a718 CR3=000000000dc6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff81777de6 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea0000e55f80 RSP=ffff888042337918 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea0000e55f80 R13=ffff88800e287000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff814cb8f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f422a1b33a4 CR3=000000000df08000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000