X + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 616.349545] Call Trace:
[ 616.349897]
[ 616.350208] dump_stack_lvl+0x8b/0xc3
[ 616.350730] populate_error_injection_list.cold-0x5/0x19
[ 616.351457] _copy_to_user+0x2a/0x150
[ 616.352005] simple_read_from_buffer+0xcc/0x170
[ 616.352642] proc_fail_nth_read+0x198/0x240
[ 616.353228] ? proc_fail_nth_read+0x0/0x240
[ 616.353806] ? security_file_permission+0xb1/0xf0
[ 616.354467] vfs_read+0x253/0x940
[ 616.354957] ? proc_fail_nth_read+0x0/0x240
[ 616.355545] ? vfs_read+0x0/0x940
[ 616.356081] ? __fget_files+0x270/0x460
[ 616.356654] ksys_read+0x127/0x260
[ 616.357160] ? ksys_read+0x0/0x260
[ 616.357667] ? syscall_enter_from_user_mode+0x1d/0x60
[ 616.358373] ? syscall_enter_from_user_mode+0x1d/0x60
[ 616.359074] do_syscall_64+0x3b/0xa0
[ 616.359594] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 616.360296] RIP: 0033:0x7fcda056269c
[ 616.360795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 616.363062] RSP: 002b:00007fcd9db25170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 616.364048] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fcda056269c
[ 616.364987] RDX: 000000000000000f RSI: 00007fcd9db251e0 RDI: 0000000000000003
[ 616.365925] RBP: 00007fcd9db251d0 R08: 0000000000000000 R09: 0000000000000000
[ 616.366869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 616.367820] R13: 00007fff19b2066f R14: 00007fcd9db25300 R15: 0000000000022000
[ 616.368790]
04:18:14 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="35c614902e504c193c952db895053c07"}})
r1 = syz_io_uring_complete(0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x20, 0x8, 0x81, 0x0, 0x3f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2400, 0x7, 0x7, 0x1, 0x3b, 0x1ce, 0x9, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x10, r1, 0x3)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8d0000000000100015900002c0004090000018000fe02000400070000ac040000098eff07c7c3030002005321010001cb010075010d000000000803000f0300003e005fce034000003dadffff060000000e1d0000ffff3f01400000000001ff000008000d01000020007daa0100040095ecbb8e05bb5934ce1cc0047d4b8ca3b40985c1ff26ad61f2847cbd5021f9f81e7974548400000000"], 0xd4)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, r1, 0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:18:14 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0xc)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@afid={'afid', 0x3d, 0x4}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r6}}, {@dont_measure}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}})
04:18:15 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8)
04:18:15 executing program 4:
openat(0xffffffffffffffff, 0x0, 0x0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200040, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r0, &(0x7f00000001c0)='./file0\x00')
renameat(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r0, 0x2)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0)
r2 = inotify_init1(0x0)
dup2(r2, r1)
clone3(&(0x7f00000008c0)={0x204000000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x2c}, &(0x7f0000000700)=""/190, 0xbe, &(0x7f00000007c0)=""/181, &(0x7f0000000880)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r0}}, 0x58)
04:18:15 executing program 2:
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0407", @ANYBLOB="a1600dd2457c4aec974ccd10420acbea59c10378307db362601a42cf20a6a841fd6562be0be0218810be47701c71bb2f0bc04b517803eebeabe7ddb50aa06fa19c82f1d1cdebd24b44cd7d0fdfdc"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xac}, "3ace787a878fd72eeb2a5298644e8f2a4bc85e1eb55627b634f7eb905ea2841f40b15fb3d77d0282e0972f01084104efd3366e86c1ca072fbf7084185db5f8c7a6f65c9c21dbe02c5b2bc8acdebf6f9c1d915a3472bf3cc730dd6eb46e5120000e3a208be876ba1736d5c526b31b5abe11353e6de8e88bd2178692e4cba6ef622f19ff038e8f541355174339fd9c7dadc4ff7c1aaab0216d80b9086695f356fea9733a8d114246a25aeb80f7"}, 0xb0)
04:18:15 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa)
[ 616.529374] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 616.532947] Bluetooth: hci0: ACL packet for unknown connection handle 201
[ 616.536776] Bluetooth: hci0: SCO packet for unknown connection handle 201
[ 616.537835] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 616.544918] Bluetooth: hci0: ACL packet for unknown connection handle 201
[ 616.546233] Bluetooth: hci0: SCO packet for unknown connection handle 201
[ 618.347250] Bluetooth: hci4: command 0x0409 tx timeout
04:18:30 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x18)
04:18:30 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="35c614902e504c193c952db895053c07"}})
r1 = syz_io_uring_complete(0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x20, 0x8, 0x81, 0x0, 0x3f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2400, 0x7, 0x7, 0x1, 0x3b, 0x1ce, 0x9, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x10, r1, 0x3)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8d0000000000100015900002c0004090000018000fe02000400070000ac040000098eff07c7c3030002005321010001cb010075010d000000000803000f0300003e005fce034000003dadffff060000000e1d0000ffff3f01400000000001ff000008000d01000020007daa0100040095ecbb8e05bb5934ce1cc0047d4b8ca3b40985c1ff26ad61f2847cbd5021f9f81e7974548400000000"], 0xd4)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, r1, 0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:18:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0xc)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}, {@afid={'afid', 0x3d, 0x4}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r6}}, {@dont_measure}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}})
04:18:30 executing program 2:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xc)
04:18:30 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2)
04:18:30 executing program 4:
openat(0xffffffffffffffff, 0x0, 0x0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200040, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r0, &(0x7f00000001c0)='./file0\x00')
renameat(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file1\x00')
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r0, 0x2)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0)
r2 = inotify_init1(0x0)
dup2(r2, r1)
clone3(&(0x7f00000008c0)={0x204000000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x2c}, &(0x7f0000000700)=""/190, 0xbe, &(0x7f00000007c0)=""/181, &(0x7f0000000880)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r0}}, 0x58)
04:18:30 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 1)
04:18:30 executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c940e2005700000000"], 0x11)
lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
getgroups(0x3, &(0x7f0000000640)=[0xee00, 0x0, 0x0])
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@measure}]}})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x4, 0xee00}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x4, r0}, {0x2, 0x3, r1}], {0x4, 0x1}, [{0x8, 0x0, r2}, {0x8, 0xb, r3}], {0x10, 0x5}, {0x20, 0x1}}, 0x54, 0x0)
04:18:31 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0xc)
04:18:31 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="35c614902e504c193c952db895053c07"}})
r1 = syz_io_uring_complete(0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x20, 0x8, 0x81, 0x0, 0x3f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2400, 0x7, 0x7, 0x1, 0x3b, 0x1ce, 0x9, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x10, r1, 0x3)
r2 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, r1, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:18:31 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 2)
04:18:31 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x19)
04:18:31 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3)
04:18:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
04:18:31 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x65, 0x1, 0x76, "a88747", 0x401, 0x6}, {@any, 0xb0, 0xff, 0x1f, "4d801c", 0x1, 0x1}, {@any, 0x4, 0x5, 0x6, "d47688", 0x400, 0x7f}]}}}, 0x31)
04:18:31 executing program 4:
syz_io_uring_setup(0x5066, &(0x7f0000000500)={0x0, 0xd0a1, 0xb}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000580), &(0x7f0000000000))
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x8010, r1, 0x10000000)
04:18:31 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4f}, "6b3f6bf202b88232e9aea7057c60272a9f1e9afc0a308a7c9a3d219897ff09e8792b50602ad568a321f03c03c1030cda6f472f4bfe57922736e88687aac215b7cbd6caf6e06260de2bf98fa7395b06"}, 0x53)
04:18:31 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="35c614902e504c193c952db895053c07"}})
r1 = syz_io_uring_complete(0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, r1, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:18:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0xc)
[ 632.661532] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 632.662407] Bluetooth: hci0: SCO packet for unknown connection handle 201
[ 632.662515] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
04:18:43 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 3)
04:18:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, 0x0)
04:18:43 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040))
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0xcc, 0x9, &(0x7f0000000140)="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"})
ioctl$KDSKBMODE(r0, 0x4b4b, &(0x7f0000000100)=0x300)
04:18:43 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:18:43 executing program 0:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000040)=0x80, 0x4)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
04:18:43 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400)
sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="44778467abebbb2a2608b6d111df4860973414d9e05b97c87093c065ef1a88c1bf0a4c642ef622fcd9237186850ac5cd10515d5cc2de5fcd72fd5cfa719eac24356699c08d765aed040004641594fac334b28e8477224a9c7afbeed6ebf405c768a704f8f80ec1dbbdaf94140eb2fd17f323a0c14765fca810bba7f967a8e87ef7584c27782a15b469577855b3301690d56535a8ddbab376b714f1a22dc201b4ff2a0f583c13eb6e6ac1ca7cf6caad3d141db212cffa22bf604db001", 0xbc}, {&(0x7f00000000c0)="f9b062e19ed3104862f29297c96f56ea8ac7daa417cca3c98f231155e82ed6922b0d67712698873d9b7373a4d964fcdb043d17e1eb4041f70e238af1ab907518d5efced5c8f80f95515461b6f13837b92bf742dd3c85f6f13932388a71a140029f5b9781324a338437670120f74212c23a8b322a3139f4d8a5fced64", 0x7c}, {&(0x7f0000000140)="6bf65c5aa5f4e2d313f143b4b87fc2e9f73ee48cf6f41a31ae71cbc9d133a209e9ca4db4908c01c5a087f413bfc054ffcccb10643feda15f85cff1ec384799a5c778ef87de2f88794d49fc60b057e9b199b32dce43558cfccf553070e9e06d2220aa9f82eb65ddd2d2a5a41000748954d6bc3784454c05f97e33ae0c685b5090d391c5736ef37fea8f3cbad6da552a0f638d59ca0ed815cf38de0fed85523e71974cd81bd43a76ffbdb1eab7cc24d18fdbadce48534f018434144d563a74eacd5a4dce6939922deb011f8252b0241a267170c732a12d77e104bb0d", 0xdb}, {&(0x7f0000000240)="7de5ce85844c090cfe32fba274b8f7526fd745fce39ed89d90930f7bfa10c54ea14e074e01e3976e25cf11f3472403f54cba14f172c1f416ce44440422f1072cf107a53bb569f4a1dfd65bd579819be213ea6a80fe618e70e7998d101ab578afdbddc08bd65dc96de3c45b5ef36372be525f72d7ca4ce3a00ee746bf46595b21f595d5ce19c78fd0cce7e9d35535d4fe7467e6545d2e076388276f4ca093e7eb688f1b3e633b7c3d5ac7d43ce34220760e", 0xb1}], 0x4, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r2}}}], 0x20, 0xc050}, 0x24000000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, 0x0)
sendfile(r3, r4, 0x0, 0xffffffffffffff02)
04:18:43 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407fcddedc15c4fc317b7d464000a913e8f16231de77de57bfd13e30162a0060000000000000050"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xdf}, "591d2abe498b2386dfdc1fd6a6e14e524b73d87691f855c5f2200d746558aecd3a38923ad4fe1bf395ff82ead3feffe0053185d2a3346266c70437437c64a554b9827c15ce7777306fce217076079fcdd90815a94f744cf993ca277456f47041c46bbd5c8af70eea0281c1df2c1a7fda45fce57326447bd8bf823e96f96af128b08bb34d414400e12ece056d426cddf803f5307a7ca21b4b1eb9f0d4799ed88c342efda0da1d1145b4f7f98931cefccc19ea6370cda88a0a35adff81aa2336c04e59b0e47f7c8838d414ab09292e423133549d2386b4d84bdcfdd7e18f0f99"}, 0xe3)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004)
04:18:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @auto="35c614902e504c193c952db895053c07"}})
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
[ 644.990796] FAULT_INJECTION: forcing a failure.
[ 644.990796] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 644.992479] CPU: 1 PID: 7691 Comm: syz-executor.1 Not tainted 6.1.0-rc1-next-20221021 #1
[ 644.993531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 644.994586] Call Trace:
[ 644.994944]
[ 644.995257] dump_stack_lvl+0x8b/0xc3
[ 644.995797] populate_error_injection_list.cold-0x5/0x19
[ 644.996560] strncpy_from_user+0x34/0x3f0
[ 644.997135] getname_flags.part.0+0x95/0x500
[ 644.997751] getname+0x8e/0xe0
[ 644.998204] do_sys_openat2+0xf9/0x4d0
[ 644.998748] ? do_sys_openat2+0x0/0x4d0
[ 644.999310] ? syscall_enter_from_user_mode+0x18/0x60
[ 645.000021] ? perf_trace_preemptirq_template+0xa2/0x430
[ 645.000776] __x64_sys_openat+0x13f/0x200
[ 645.001364] ? __x64_sys_openat+0x0/0x200
[ 645.001944] ? syscall_enter_from_user_mode+0x1d/0x60
[ 645.002645] ? syscall_enter_from_user_mode+0x1d/0x60
[ 645.003392] do_syscall_64+0x3b/0xa0
[ 645.003944] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 645.004676] RIP: 0033:0x7f0d979e7a04
[ 645.005208] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 645.007617] RSP: 002b:00007f0d94fa9cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 645.008679] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f0d979e7a04
[ 645.009638] RDX: 0000000000002482 RSI: 00007f0d94fa9d60 RDI: 00000000ffffff9c
[ 645.010600] RBP: 00007f0d94fa9d60 R08: 0000000000000000 R09: 0000000000000000
[ 645.011561] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000002482
[ 645.012527] R13: 00007ffee5cbc8df R14: 00007f0d94faa300 R15: 0000000000022000
[ 645.013527]
[ 645.049621] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 645.050548] Bluetooth: hci0: SCO packet for unknown connection handle 201
[ 645.050670] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
04:18:43 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x9)
04:18:43 executing program 0:
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_conf_req={{0x4, 0x8, 0x13}, {0x7, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x1}]}}]}}, 0x20)
04:18:43 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 4)
04:18:43 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="178400000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000802e2f66696c653000"])
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x4600, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='\'\x92\'+\x00', 0x0, r4)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0xf4e, 0x2, 0x7, 0x5})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmmsg$inet6(r5, &(0x7f0000001600)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000001400)=[{&(0x7f00000001c0)="7010d3cf82c60478d2c8c6de46ed09b003fe7ee98b87c55295545fc5fd3235c536aa3e3c41fcfbc797", 0x29}, {&(0x7f0000000200)="306f1543e88cae7dc85c1b8480529fb924294a51ec2ccdcbf9754ee37cb249c6e83a875768642aacf0d059a76cd2727bc503fdabd8a184379a6400474807aac335c55dbe3e16bcf90668cafbd9cb2a29356c39b58d6365b408807b0cdcea5a", 0x5f}, {&(0x7f0000000280)="bfab87e65da115382cb7a4e1762b25104f67c66bcc6733cdb5d4126b565a624535b6e7337c436f070c5a5035ca9bbcb2131e3855c19612c65bae256a1f7093c651913e026a35853bb3032339c50f4fb31706a60c6dee560d15c9b7fff59912db0e6b623664a6a99bb129b4b9e03f047e90bcb802965f56888abd719e9cd4fceb2a19a16f96f3dcb52c18675bb0f5224a6fc90e6d370751f68990ce56", 0x9c}, {&(0x7f0000000340)="9bf408abec8b4ca991621701f47a61d282ef32a963513aabc6d2577ff389e7c9de8afe45bda937987afd15916360cd3a021b25a356a945fab257d3ab8e1ce68accf1dfefda6e1f9d4d0aee6d9671a625944c12237d894057dd5ea8182a5865a17cb579101f61f12300716ad5b4195aeadf910df1bf7db38fe736db1d965c455214e3c00dc51b59029f5bfa201f69c9abd4d117a2120215952e57", 0x9a}, {&(0x7f0000000400)="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", 0x1000}], 0x5, &(0x7f0000001480)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x2f, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @pad1, @hao={0xc9, 0x10, @empty}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hopopts_2292={{0x38, 0x29, 0x36, {0xc, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfa000}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3c, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x32, 0x10, 0x2, 0xfd, 0x0, [@mcast2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x16}, @mcast1, @remote, @remote, @empty, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x180}}], 0x1, 0x4044895)
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000001640)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}]}, 0x7)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:18:43 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ff07"], 0xc)
04:18:57 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000140)=ANY=[@ANYBLOB="8d866938a6154a679cb554bab4d700000000000000000000042afc383b5f81748a01a86dd7873db5038de1e71ecef0da5e1390849a2a742df778a7bf72ec4b281f54da98a639d31539250c19b019b350564f9cc9613c78932f79ba2f4a10a85f3f1a59a27b858f1e1d89adfb804a769587eeb95d695c5fbb91bd7d5b90a35b6b9e1fa56024a79f6d0222"], 0xf, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:18:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:18:57 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407"], 0xc)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x65}, @l2cap_cid_signaling={{0x61}, [@l2cap_conf_rsp={{0x5, 0x81, 0x49}, {0xe8, 0x3ff, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x2, 0x2, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0xc5a9, 0x4, 0x4, 0x2}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x3, 0x0, 0x2, 0xb9b}}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x1000, 0x7ffe}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x0, 0x1f4}}]}}, 0x6a)
04:18:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
04:18:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84041, 0x125)
acct(&(0x7f00000000c0)='./file1\x00')
fallocate(r0, 0x0, 0x0, 0x87ffffc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x22)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40086602, &(0x7f0000000000)={0x0, r0, 0xbeb, 0x6, 0x10000000000000})
move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x37)
clone3(&(0x7f00000003c0)={0x18c142600, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/203, 0xcb, &(0x7f00000005c0)=""/82, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58)
r2 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x201)
ppoll(&(0x7f0000000340)=[{r2, 0x25b4}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000006ef6a440d487187352876515da7ae63b60b3314a53c7a0094a65c55fc80c479c853dad105017e1d7622107ea2d0391043b45bfb5ce9de492550dc8a42ef0585f0807a144084e5017918c046355c870a206284de57a2a43d3e663c90ac92df2ed5011e9f95245886fa7509b8c952ce41ad8c5abe665086823c6b1d142726b2640380908d6eb18397de0", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04e0d51492565b59c1"])
pread64(r5, &(0x7f0000000040)=""/170, 0x49, 0x180000000000000)
pread64(r1, &(0x7f00000004c0)=""/168, 0xa8, 0x3)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x6, 0x3502, 0x2000000080000000, 0x6, 0x4, 0x1, {0x1}}, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x12, 0x0, 0x0})
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x2)
04:18:57 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 5)
04:18:57 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa)
04:18:57 executing program 0:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042007000000052a00000000"], 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x23, 0x4}, {0x1f, 0x2}}}}, 0x11)
04:18:57 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
04:18:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x1d, 0x2, 0x7e, 0x4, 0x668})
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
[ 645.058529] Bluetooth: hci0: SCO packet for unknown connection handle 201
[ 658.871213] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 658.873969] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 658.874958] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 658.902532] Bluetooth: Unexpected continuation frame (len 12)
04:18:57 executing program 2:
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000180)={0x3, 0x4, 0xe9, &(0x7f0000000080)=""/233})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r3, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRES16, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESDEC=r3], 0xc)
04:18:57 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0xd73d9000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/182, 0xb6}], 0x5, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x2001)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x101, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, 0x0)
poll(&(0x7f0000000740)=[{r0, 0x2092}, {r1, 0x2000}, {r2}, {0xffffffffffffffff, 0x401}, {r3, 0x380}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0xa1b9}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1202}, {0xffffffffffffffff, 0x22a4}], 0xa, 0x8)
fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f00000000c0)=']\\:\x00', 0x4, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='\x00', 0x0, 0xffffffffffffffff)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:18:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r6, 0x0)
04:18:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:18:57 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xb)
04:18:57 executing program 5:
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
getpeername$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x5ca3000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/86)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil)
04:18:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
04:18:57 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04200400000000000000"], 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x6, 0xc9}}}, 0x5)
04:18:57 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 6)
[ 659.026808] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 659.153243] Process accounting resumed
[ 659.279191] Process accounting resumed
04:19:10 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ee38"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
04:19:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000040), 0x14)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x40, 0x4000)
connect$802154_dgram(r2, &(0x7f0000000200)={0x24, @none={0x0, 0x1}}, 0x14)
fsmount(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x4002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0)
04:19:10 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 7)
04:19:10 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x3c}, "801427a81b65cea72768f065d3180fe5fd2cab660995a7fbd79b0b83f582f017fb3ed65660059db93c56a2c9f0f11fb556360674e37605963534741e"}, 0x40)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9)
04:19:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000002c0))
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:19:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x7fff, 0x0, 0x3, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
04:19:10 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xe)
04:19:10 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5ff2000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:19:10 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 8)
[ 671.704782] Bluetooth: hci6: SCO packet for unknown connection handle 0
04:19:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
04:19:10 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xf)
04:19:10 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0x3)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
[ 671.718542] Bluetooth: hci6: SCO packet for unknown connection handle 0
[ 671.884428] Bluetooth: hci6: unexpected event 0x20 length: 0 < 7
[ 671.891247] Bluetooth: hci6: unexpected event 0x20 length: 0 < 7
04:19:27 executing program 2:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64], 0xc)
04:19:27 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x67)
04:19:27 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x33a964ff9ef92166}, 0x2)
04:19:27 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x10)
04:19:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x80, 0x0, 0x7, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xfd, 0x0, 0xfe, 0x1, 0x0, 0x400, 0x4000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x99d0, 0x0, @perf_config_ext={0x4, 0xffff}, 0x200, 0xffffffffffffffe1, 0x8, 0x5, 0x8, 0x0, 0x2, 0x0, 0x400, 0x0, 0x1ffe000000000}, 0xffffffffffffffff, 0x6, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x20000010000}], 0x0, &(0x7f0000000040)=ANY=[])
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x0, 0x7, 0x6, 0x80000001, 0x0, "28ffb3c706a64eb97fab4b05a34db943696408"})
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000100))
syz_open_dev$tty20(0xc, 0x4, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f0000000040))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@msize={'msize', 0x3d, 0xfffffffffffffff9}}, {@version_u}, {}, {@uname={'uname', 0x3d, 'vfat\x00'}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt}, {@seclabel}]}})
pipe(&(0x7f0000000400))
04:19:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
04:19:27 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 9)
04:19:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:19:27 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
04:19:27 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x2000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000004, r0)
04:19:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
04:19:27 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
[ 688.714425] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 688.715381] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
04:19:27 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x11)
04:19:27 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
04:19:27 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 10)
04:19:27 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:19:27 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x44031, r0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001200)=ANY=[@ANYBLOB="0100000100000000000000a4", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/197, 0xc5}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000940)=""/16, 0x10}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/240, 0xf0}], 0x1, &(0x7f0000000bc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d00)=""/178, 0xb2}, {&(0x7f0000000dc0)=""/189, 0xbd}], 0x2, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x4, 0x40, 0x0)
fstat(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000001140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@version_9p2000}], [{@dont_measure}, {@uid_eq={'uid', 0x3d, r4}}]}})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
[ 688.827740] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[ 688.834883] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
04:19:27 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5ff2000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:19:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1, 0x2, 0x2, 0x2, 0x7}, &(0x7f00000000c0)=0x20)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x7)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
04:19:45 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5ff2000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:19:45 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 11)
04:19:45 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x12)
04:19:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
04:19:45 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407"], 0xc)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x1, 0xf5f, 0xc77, 0xffff}}, @l2cap_move_chan_rsp={{0xf, 0x3, 0x4}, {0x1, 0x1ff}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x4, 0x5}}, @l2cap_conf_rsp={{0x5, 0x8, 0x1b}, {0xf7e, 0x2f4, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x92, 0x0, 0x8, 0x68, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x44)
04:19:45 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xb)
04:19:45 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
[ 707.359291] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
[ 707.360260] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 707.361326] Bluetooth: hci0: unexpected event 0x07 length: 9 < 255
04:19:46 executing program 5:
write(0xffffffffffffffff, &(0x7f0000000140)="a8aa7131b8923d4052f287e6f99f408e6e9df20887aa6182b2fee0e01d84c87834da8366c196f318cd07a0e443a88f17dbcfbd823e3a08cc05a8413129a8e95dcb078cbddb985b6e40491d880f1aa6e1610b0e9380b7268698bc07a591e38d28c95d4cdde5a022883dc2a6b6aa8d148fa46168f6c5fedb93cb77f3992b82ac90e02d45053e5ed9d0e1f1f58467c7", 0x8e)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}}, 0x20000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000200)={0x1, 0x6, 0x3})
04:19:46 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 12)
04:19:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
04:19:46 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:19:46 executing program 0:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="3b49c11d", 0x4, 0xfffffffffffffff9)
keyctl$assume_authority(0x10, r0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0xa)
04:19:46 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5ff2000)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
04:19:46 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x13)
04:19:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
04:19:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:19:46 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0xffc0, 0x8001}}}, 0x7)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7)
04:19:46 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5ff2000)
[ 707.776933] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1
[ 707.777062] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1
[ 707.778966] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1
04:19:59 executing program 1:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2482) (fail_nth: 13)
04:19:59 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x44031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x5ff2000)
04:19:59 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}}}, 0xa)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x38, 0x2}, {0x6c}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9100c0008a1d4d92d20000100070704000900000e"], 0x11)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
04:19:59 executing program 5:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r0 = memfd_secret(0x80000)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"])
04:19:59 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x14)
04:19:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x1, 0x81, 0xa6, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000140)}, 0x4048, 0x1fa2bfc, 0x6, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
04:19:59 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a0038000303030303030000080026006c090000"], 0x30}}, 0x0)
[ 707.780035] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1
[ 721.035239] Bluetooth: Unexpected continuation frame (len 10)
[ 721.041615] FAULT_INJECTION: forcing a failure.
[ 721.041615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 721.043143] CPU: 1 PID: 7899 Comm: syz-executor.1 Not tainted 6.1.0-rc1-next-20221021 #1
[ 721.044196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 721.045265] Call Trace:
[ 721.045612]
[ 721.045924] dump_stack_lvl+0x8b/0xc3
[ 721.046457] populate_error_injection_list.cold-0x5/0x19
[ 721.047200] _copy_to_user+0x2a/0x150
[ 721.047743] simple_read_from_buffer+0xcc/0x170
[ 721.048382] proc_fail_nth_read+0x198/0x240
[ 721.048989] ? proc_fail_nth_read+0x0/0x240
[ 721.049580] ? security_file_permission+0xb1/0xf0
[ 721.050249] vfs_read+0x253/0x940
[ 721.050751] ? proc_fail_nth_read+0x0/0x240
[ 721.051343] ? vfs_read+0x0/0x940
[ 721.051854] ? __fget_files+0x270/0x460
[ 721.052430] ksys_read+0x127/0x260
[ 721.052962] ? ksys_read+0x0/0x260
[ 721.053470] ? syscall_enter_from_user_mode+0x1d/0x60
[ 721.054167] ? syscall_enter_from_user_mode+0x1d/0x60
[ 721.054879] do_syscall_64+0x3b/0xa0
[ 721.055391] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 721.056089] RIP: 0033:0x7f0d979e769c
[ 721.056583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 721.058910] RSP: 002b:00007f0d94faa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 721.059894] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0d979e769c
[ 721.060815] RDX: 000000000000000f RSI: 00007f0d94faa1e0 RDI: 0000000000000003
[ 721.061744] RBP: 00007f0d94faa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 721.062667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 721.063591] R13: 00007ffee5cbc8df R14: 00007f0d94faa300 R15: 0000000000022000
[ 721.064541]
[ 721.071399] Bluetooth: Unexpected continuation frame (len 12)
[ 721.080391] Bluetooth: Unexpected continuation frame (len 10)
[ 721.082019] Bluetooth: Unexpected continuation frame (len 12)
04:19:59 executing program 2:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="9b252471aafe6b", 0x7}, {&(0x7f00000000c0)="dc8fde3d0b32435d2c457ae661847d0e0a5e8cea36226918337da0f3e453d0224ab6d11f4b85f687c60858e95f482f1dc4cebc350860acb8901d70e7a1d12cea835570a909766197877e50dc3d5359e38d506ee655033dcb605e93522f82626fbda133a3e42f2503ca36e664c94fd57821addd3121fb4b52dfea891bc7ec021e0810dbc8d32e39cc14d6701f74c4", 0x8e}, {&(0x7f0000000180)="7158cb604f6b75a68e14ed6fd7ad501d06ace901d105d4365b9e40534cb9cba43cfc3c56e16e8f09418787cd88166091807bb36f43e1df63de2d68a89f79583df71a71acadc7357de1e0682a3d47df34c29914b12cb0b8f410003b2d73e761154cbe25c69587af332a026fd7cdf9cf62f154c50010b2c562630b78dc", 0x7c}, {&(0x7f0000000200)="f08ebe42e97e9b14df63f8cc2a095dc2e8e0a1309ea17969b806628b9a23bbdf58d144aa525998a042d7c1a684697cf00e996999a0dd8f94ad4c383793ffff9464335f90d00c30be922ca606985f892b", 0x50}, {&(0x7f0000000280)="98d9c292c9", 0x5}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000002900000037000000870000000000000024000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="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"/564], 0x270}}, {{&(0x7f00000005c0)={0xa, 0x4e24, 0xfffffeff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x99d}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000600)="03929b8c482bfa45e90156e6b55193b93cd8d0bfb62654f76fba4d41e42f5ce2e1f61753d776a4eb3482b5ab44f91f7a5d25aea057387ddd5ea248c1e6b15e6500a26ba93563288cc8a2b7957172b8ba56f917a710c8a87b99b55301641711d027f2d7e47e6ae1855ae85f284ac0fcd93d11e9", 0x73}, {&(0x7f0000000680)="2b4395de35ab93cca930aa0c34fcd564385c590d5c7a04afdd2a585025c4da3e3eac25db286114556f410d8d5620f5a4097db4ab1e44c8ec676931405e5412f7ef2035378ebbcf37e9d029c1cd9239745a83d716560fbb635e48efd699086e10fe0052728c8473d63c70207c169e3effe913245d", 0x74}, {&(0x7f0000000700)="442b93d5", 0x4}, {&(0x7f0000003b40)="310b986b3256fbf14d031e569ff5f61ca8676fd67742504572c3c5239fa231f67648ce12657064bb485a60d100e094157fec110e6f942fffe2cab07115c8101f6e896c95ebf5550eea02d61566c1fb51d66f072909c3a68f7e9aab0dfd54fc2da1db39e44ae108efd1f1165f9ce4a3d0ebe8779504425aa9cad931ca4bcfedbbb30b6212e0070400000000000000fb5a7ff0ad0210ff69b8c4b5f77104bdaa83e233d1c977ee7eb31d662f53ba97ba51cf49c0311c27862d92b340db3764b69f160d33b7369cc9df7a8a136be1051d48e85a7eff3f37ed14755b3417bdc9540fb70f0c1f73", 0xe5}, {&(0x7f00000007c0)="a21e20b410eb4d7dfa4954dc1961a446c1455ba73ff649731f4ec7a1a3e00873b51dbc8154c81fe8fc36a330dd4f686f228c566ef9f2b774d0af77675bf2e440fe345ebc1f20a1db9ed0d60abd9fd7b5f22c4b663b66468c3e4ca3314e2e0a4730fefc1990d8e34d61dddc676ba013c1a11b324438157341c8167b48d6ff6ef547aef2de26ee2bdb771254027547d249463d6086eb7a0f46b2", 0x99}, {&(0x7f0000000880)="3f3745f2c3a23edd8196fc9a1fd994bb7d50cbc6ac0d86482be38801aa93e2b367dd0c69fe282233b8670c", 0x2b}, {&(0x7f00000008c0)="16d5f8e085dbf44e840ded5b4c1a73d3c91b5a0decdca1baf1fe3d7a9227d14aa7", 0x21}, {&(0x7f0000000900)="35fc4aa358691beccff72085b888f4cfa54bc6dfa698e107c3d656", 0x1b}], 0x8, &(0x7f00000009c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], 0x40}}], 0x2, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0})
r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000070280)={0x0, [{0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r1}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r1, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0,